CVEvulnerability
CVE-2024-40789
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-125
Description
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.
Affected configurations
• apple safari (< 17.6)
• apple ipados (< 16.7.9)
• apple ipados (>= 17.0 < 17.6)
• apple iphone os (< 16.7.9)
• apple iphone os (>= 17.0 < 17.6)
• apple macos (< 14.6)
• apple tvos (< 17.6)
• apple visionos (< 1.3)
• apple watchos (< 10.6)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.apple.com/en-us/120908 support.apple.com
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- https://support.apple.com/en-us/120913 support.apple.com
- https://support.apple.com/en-us/120914 support.apple.com
- https://support.apple.com/en-us/120915 support.apple.com
- https://support.apple.com/en-us/120916 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/15 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/22 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/23 Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html lists.debian.org
- https://support.apple.com/en-us/HT214116 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214121 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214122 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214123 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214124 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214116 support.apple.com
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214121 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214122 support.apple.com
- https://support.apple.com/kb/HT214124 support.apple.com