Unexpected Termination of macOS Due to Maliciously Crafted Video File

Summary

The vulnerability with CVE number CVE-2024-40841 impacts Apple macOS and allows remote attackers to execute arbitrary code. The vulnerability is related to the processing of MOV files in the VTDecoderXPCService process, resulting from the lack of proper validation of user-supplied data, which can lead to unexpected app termination. Apple has issued an update to address this vulnerability, and user interaction is required to exploit it. No known exploit by ransomware groups has been reported at this time.

News Articles

SystemTek

CVE-2024-40841

Apple macOS AppleVADriver Out-Of-Bounds Write Remote Code Execution Vulnerability [CVE-2024-40841]

CVE number = CVE-2024-40841 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS, it has a CVSS score of 8.8 User interaction is required to exploit...

3 months ago

References