Files
vuln-cve/data/2024/40xxx/CVE-2024-40780.json
T

318 lines
12 KiB
JSON

{
"dataType": "CVE_RECORD",
"cveMetadata": {
"cveId": "CVE-2024-40780",
"assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"state": "PUBLISHED",
"assignerShortName": "apple",
"dateReserved": "2024-07-10T17:11:04.688Z",
"datePublished": "2024-07-29T22:16:37.836Z",
"dateUpdated": "2026-04-02T18:10:19.614Z"
},
"containers": {
"cna": {
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Processing maliciously crafted web content may lead to an unexpected process crash"
}
]
}
],
"affected": [
{
"vendor": "Apple",
"product": "Safari",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "17.6",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "iOS and iPadOS",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "16.7.9",
"versionType": "custom"
},
{
"version": "0",
"status": "affected",
"lessThan": "17.6",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "macOS",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "14.6",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "tvOS",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "17.6",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "visionOS",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "1.3",
"versionType": "custom"
}
]
},
{
"vendor": "Apple",
"product": "watchOS",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "10.6",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 17.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing maliciously crafted web content may lead to an unexpected process crash."
}
],
"references": [
{
"url": "https://support.apple.com/en-us/120908"
},
{
"url": "https://support.apple.com/en-us/120909"
},
{
"url": "https://support.apple.com/en-us/120911"
},
{
"url": "https://support.apple.com/en-us/120913"
},
{
"url": "https://support.apple.com/en-us/120914"
},
{
"url": "https://support.apple.com/en-us/120915"
},
{
"url": "https://support.apple.com/en-us/120916"
}
],
"providerMetadata": {
"orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
"shortName": "apple",
"dateUpdated": "2026-04-02T18:10:19.614Z"
}
},
"adp": [
{
"problemTypes": [
{
"descriptions": [
{
"type": "CWE",
"cweId": "CWE-125",
"lang": "en",
"description": "CWE-125 Out-of-bounds Read"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
}
},
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2024-07-29T23:51:19.473237Z",
"id": "CVE-2024-40780",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-10-27T01:06:18.828Z"
}
},
{
"title": "CVE Program Container",
"references": [
{
"url": "https://support.apple.com/en-us/HT214121",
"tags": [
"x_transferred"
]
},
{
"url": "https://support.apple.com/en-us/HT214117",
"tags": [
"x_transferred"
]
},
{
"url": "https://support.apple.com/en-us/HT214116",
"tags": [
"x_transferred"
]
},
{
"url": "https://support.apple.com/en-us/HT214124",
"tags": [
"x_transferred"
]
},
{
"url": "https://support.apple.com/en-us/HT214119",
"tags": [
"x_transferred"
]
},
{
"url": "https://support.apple.com/en-us/HT214123",
"tags": [
"x_transferred"
]
},
{
"url": "https://support.apple.com/en-us/HT214122",
"tags": [
"x_transferred"
]
},
{
"url": "http://seclists.org/fulldisclosure/2024/Jul/16",
"tags": [
"x_transferred"
]
},
{
"url": "http://seclists.org/fulldisclosure/2024/Jul/15",
"tags": [
"x_transferred"
]
},
{
"url": "http://seclists.org/fulldisclosure/2024/Jul/23",
"tags": [
"x_transferred"
]
},
{
"url": "http://seclists.org/fulldisclosure/2024/Jul/21",
"tags": [
"x_transferred"
]
},
{
"url": "http://seclists.org/fulldisclosure/2024/Jul/17",
"tags": [
"x_transferred"
]
},
{
"url": "http://seclists.org/fulldisclosure/2024/Jul/22",
"tags": [
"x_transferred"
]
},
{
"url": "http://seclists.org/fulldisclosure/2024/Jul/18",
"tags": [
"x_transferred"
]
},
{
"url": "https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html"
},
{
"url": "https://support.apple.com/kb/HT214124"
},
{
"url": "https://support.apple.com/kb/HT214123"
},
{
"url": "https://support.apple.com/kb/HT214122"
},
{
"url": "https://support.apple.com/kb/HT214119"
},
{
"url": "https://support.apple.com/kb/HT214117"
},
{
"url": "https://support.apple.com/kb/HT214116"
}
],
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2025-11-04T17:22:55.216Z"
}
}
]
},
"dataVersion": "5.2"
}