Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-40782

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Published

2024-07-29T23:15:11.790

Last Modified

2024-12-10T14:40:38.913

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses

Type: Primary
CWE-416
Type: Secondary
CWE-416

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apple	safari	< 17.6	Yes
Operating System	apple	ipados	< 16.7.9	Yes
Operating System	apple	ipados	< 17.6	Yes
Operating System	apple	iphone_os	< 16.7.9	Yes
Operating System	apple	iphone_os	< 17.6	Yes
Operating System	apple	macos	< 14.6	Yes
Operating System	apple	tvos	< 17.6	Yes
Operating System	apple	visionos	< 1.3	Yes
Operating System	apple	watchos	< 10.6	Yes

References

http://seclists.org/fulldisclosure/2024/Jul/15 Mailing List ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/22 Mailing List ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/23 Mailing List ([email protected])
https://support.apple.com/en-us/HT214116 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214117 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214119 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214121 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214122 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214123 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214124 Vendor Advisory ([email protected])
http://seclists.org/fulldisclosure/2024/Jul/15 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/16 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/17 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/18 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/21 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/22 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jul/23 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214116 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214117 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214119 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214121 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214122 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214123 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214124 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)