CVE-2024-54540: Apple Music

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The issue was addressed with improved input sanitization. This issue is fixed in Apple Music 1.5.0.152 for Windows. Processing maliciously crafted web content may disclose internal states of the app.

Affected products

• Apple Music: before 1.5.0.152 (fixed in 1.5.0.152)

Published 2025-01-15. Last modified 2026-06-17.