CVE-2024-54540

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2025-01-15

Last modified

2026-05-21

Weaknesses

CWE-79

Affected products

• Apple Music (Apple)
• Music (Apple)

References

• https://support.apple.com/en-us/122043