CVE-2024-54540

—

CVSS 3.1

4.3 medium

EPSS

<1%p11

Published

Jan 15, 2025 (Jan 15, 2025)

Modified

Jun 17, 2026

Description

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.

Vendors: apple
Products: music
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.