CVE-2024-40777

2024-07-2923:15:11

[email protected]

web.nvd.nist.gov

out-of-bounds access

ios 17.6

ipados 17.6

watchos 10.6

tvos 17.6

visionos 1.3

macos sonoma 14.6

unexpected app termination

maliciously crafted file

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS

Percentile

13.5%

JSON

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing a maliciously crafted file may lead to unexpected app termination.