CVE-2024-44157

5.5 mediumEPSS 0.2%

Medium (5.5) in apple. EPSS 0.2% chance of exploitation in the next 30 days.

A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-120
Published: 2024-10-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:apple_tv
apple:itunes

References

https://support.apple.com/en-us/121328
https://support.apple.com/en-us/121441

Check your stack JSON