CVE-2024-54517 is a vulnerability in Apple iOS and iPadOS that allows an app with limited privileges to corrupt coprocessor memory due to inadequate bounds checking (CWE-787). This memory corruption could impact confidentiality, integrity, and availability of the system. Apple fixed the issue by improving bounds checks in iOS 18.2, iPadOS 18.2, and related OS versions. The vulnerability has a CVSS 3.1 base score of 7.8, reflecting high severity with local attack vector, low attack complexity, low privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

An app running on vulnerable versions of iOS or iPadOS could corrupt coprocessor memory, potentially leading to compromise of system confidentiality, integrity, and availability. This could allow unauthorized access or manipulation of sensitive data or system functions. The vulnerability affects multiple Apple platforms and is rated high severity with a CVSS score of 7.8. No known exploits have been reported in the wild so far.

Apple has released official fixes for this vulnerability in iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, and watchOS 11.2. Users and administrators should apply these updates promptly to remediate the issue. Patch status is confirmed by the vendor advisory stating the issue is fixed in these versions. No additional mitigation steps are indicated beyond updating to the fixed OS versions.