CVE-2024-40784

MEDIUM

iPadOS < 16.7.9 - Integer Overflow via Maliciously Crafted File

Title source: llm
STIX 2.1

Description

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app termination.

References (28)

Core 28
Core References

Scores

CVSS v3 5.5
EPSS 0.0003
EPSS Percentile 9.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-190
Status published
Products (13)
Apple/iOS and iPadOS < 16.7.9
Apple/iOS and iPadOS < 17.6
apple/ipados < 16.7.9
apple/iphone_os < 16.7.9
Apple/macOS < 13.6.8
Apple/macOS < 14.6
apple/macos 13.0 - 13.6.8
apple/tvos < 17.6
Apple/tvOS < 17.6
apple/visionos < 1.3
... and 3 more
Published Jul 29, 2024
Tracked Since Feb 18, 2026