CVEvulnerability
CVE-2024-40799
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
- Weaknesses
- CWE-125
Description
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app termination.
Affected configurations
• apple ipados (< 16.7.9)
• apple ipados (>= 17.0 < 17.6)
• apple iphone os (< 16.7.9)
• apple iphone os (>= 17.0 < 17.6)
• apple macos (< 12.7.6)
• apple macos (>= 13.0 < 13.6.8)
• apple macos (>= 14.0 < 14.6)
• apple tvos (< 17.6)
• apple visionos (< 1.3)
• apple watchos (< 10.6)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.apple.com/en-us/120908 support.apple.com
- https://support.apple.com/en-us/120909 support.apple.com
- https://support.apple.com/en-us/120910 support.apple.com
- https://support.apple.com/en-us/120911 support.apple.com
- https://support.apple.com/en-us/120912 support.apple.com
- https://support.apple.com/en-us/120914 support.apple.com
- https://support.apple.com/en-us/120915 support.apple.com
- https://support.apple.com/en-us/120916 support.apple.com
- http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/19 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/20 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/22 Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Jul/23 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214116 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214117 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214118 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214119 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214120 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214122 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214123 Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214124 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214116 support.apple.com
- https://support.apple.com/kb/HT214117 support.apple.com
- https://support.apple.com/kb/HT214118 support.apple.com
- https://support.apple.com/kb/HT214119 support.apple.com
- https://support.apple.com/kb/HT214120 support.apple.com
- https://support.apple.com/kb/HT214122 support.apple.com
- https://support.apple.com/kb/HT214124 support.apple.com