CVE-2024-40788

Katalog CVE

CVSS 5.5 · Medium EPSS 0,32%

Kerentanan Access of Resource Using Incompatible Type ('Type Confusion') pada apple ipados, apple iphone os +4 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. A local attacker may be able to cause unexpected system shutdown.

Rincian

Terbit di NVD

29 Juli 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 22,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT214116 advisory vendor
• https://support.apple.com/en-us/HT214117 advisory vendor
• https://support.apple.com/en-us/HT214118 advisory vendor
• https://support.apple.com/en-us/HT214119 advisory vendor
• https://support.apple.com/en-us/HT214120 advisory vendor
• https://support.apple.com/en-us/HT214122 advisory vendor
• https://support.apple.com/en-us/HT214123 advisory vendor
• https://support.apple.com/en-us/HT214124 advisory vendor
• http://seclists.org/fulldisclosure/2024/Jul/16 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Jul/17 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Jul/18 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Jul/19 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Jul/20 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Jul/21 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Jul/22 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Jul/23 mailing list · advisory pihak ketiga
• https://support.apple.com/en-us/120908
• https://support.apple.com/en-us/120909
• https://support.apple.com/en-us/120910
• https://support.apple.com/en-us/120911
• https://support.apple.com/en-us/120912
• https://support.apple.com/en-us/120914
• https://support.apple.com/en-us/120915
• https://support.apple.com/en-us/120916
• https://support.apple.com/kb/HT214116