CVE-2024-54564 is a vulnerability in Apple iOS and iPadOS where files received via AirDrop may not have the quarantine flag applied as intended. The quarantine flag is a security mechanism that helps prevent untrusted files from executing automatically or causing harm. The flaw was addressed by Apple through improved state management and fixed in iOS 17.6 and iPadOS 17.6. The CVSS 3.1 base score is 6.5, indicating a medium severity issue with network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality and availability impact. This vulnerability is tracked under CWE-276 (Incorrect Default Permissions). There are no known exploits in the wild at this time.

The impact of this vulnerability is that a file received via AirDrop may not be properly marked with the quarantine flag, potentially allowing it to bypass some security checks that rely on this flag. This could lead to limited confidentiality loss and availability impact as indicated by the CVSS vector. However, there is no indication of integrity impact or active exploitation. The vulnerability affects iOS and iPadOS versions prior to 17.6.

Apple has released an official fix for this vulnerability in iOS 17.6 and iPadOS 17.6. Users and administrators should update affected devices to these versions or later to remediate the issue. Since this is not a cloud service, remediation depends on applying the vendor's software update. There are no known exploits in the wild, and no additional mitigation steps are indicated by the vendor advisory.