CVE-2024-54522 is a memory corruption vulnerability (CWE-787) in Apple operating systems including iOS and iPadOS. It allows a local app with limited privileges to corrupt coprocessor memory due to inadequate bounds checking. The flaw was mitigated by Apple in iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, and watchOS 11.2 through improved bounds checks. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability with low attack vector (local), low attack complexity, and no user interaction required.

Successful exploitation could allow an app to corrupt coprocessor memory, potentially leading to arbitrary code execution or system instability. The vulnerability impacts confidentiality, integrity, and availability of affected devices. However, exploitation requires local access with limited privileges, and no public exploits are currently known.

Apple has released official fixes in iOS 18.2, iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, and watchOS 11.2. Users and administrators should apply these updates promptly to remediate the vulnerability. No additional mitigations are indicated by the vendor advisory.