Safari Fixes Use-After-Free Issue to Prevent Process Crashes
CVE-2024-40782

6.5MEDIUM

Key Information:

Vendor
Apple
Status
Safari
iOS And iPad OS
Watch OS
Mac OS
Vendor
CVE Published:
29 July 2024

Summary

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

Affected Version(s)

iOS and iPadOS < 17.6

iOS and iPadOS < 16.7

macOS < 14.6

References

https://support.apple.com/en-us/HT214121
https://support.apple.com/en-us/HT214117
https://support.apple.com/en-us/HT214116

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.