CVE-2024-40789

Description

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash.

PUBLISHED Reserved 2024-07-10 | Published 2024-07-29 | Updated 2026-04-02 | Assigner apple

Problem types

Processing maliciously crafted web content may lead to an unexpected process crash

Product status

References

support.apple.com/en-us/HT214121

support.apple.com/en-us/HT214117

support.apple.com/en-us/HT214116

support.apple.com/en-us/HT214124

support.apple.com/en-us/HT214119

support.apple.com/en-us/HT214123

support.apple.com/en-us/HT214122

support.apple.com/kb/HT214121

seclists.org/fulldisclosure/2024/Jul/16

seclists.org/fulldisclosure/2024/Jul/15

seclists.org/fulldisclosure/2024/Jul/23

seclists.org/fulldisclosure/2024/Jul/21

seclists.org/fulldisclosure/2024/Jul/17

seclists.org/fulldisclosure/2024/Jul/22

seclists.org/fulldisclosure/2024/Jul/18

lists.debian.org/debian-lts-announce/2024/09/msg00006.html

support.apple.com/kb/HT214124

support.apple.com/kb/HT214122

support.apple.com/kb/HT214119

support.apple.com/kb/HT214117

support.apple.com/kb/HT214116

support.apple.com/en-us/120908

support.apple.com/en-us/120909

support.apple.com/en-us/120911

support.apple.com/en-us/120913

support.apple.com/en-us/120914

support.apple.com/en-us/120915

support.apple.com/en-us/120916

cve.org (CVE-2024-40789)

nvd.nist.gov (CVE-2024-40789)

Download JSON