CVE-2024-40784

Published: Jul 29, 2024Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, visionOS 1.3, watchOS 10.6. Processing a maliciously crafted file may lead to unexpected app termination.

Affected (9)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Visionos, Watchos

6 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	version < 16.7.9
Apple Ipados	17.0 ≤ version < 17.6
Apple Iphone Os	version < 16.7.9
Apple Iphone Os	17.0 ≤ version < 17.6
Apple Macos	13.0 ≤ version < 13.6.8
Apple Macos	14.0 ≤ version < 14.6
Apple Tvos	version < 17.6
Apple Visionos	version < 1.3
Apple Watchos	version < 10.6

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (28)

https://support.apple.com/en-us/120908

Source: product-security@apple.com

https://support.apple.com/en-us/120909

Source: product-security@apple.com

https://support.apple.com/en-us/120911

Source: product-security@apple.com

https://support.apple.com/en-us/120912

Source: product-security@apple.com

https://support.apple.com/en-us/120914

Source: product-security@apple.com

https://support.apple.com/en-us/120915

Source: product-security@apple.com

https://support.apple.com/en-us/120916

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2024/Jul/16

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/Jul/17

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/Jul/18

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/Jul/19

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/Jul/21

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/Jul/22

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

http://seclists.org/fulldisclosure/2024/Jul/23

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing List

https://support.apple.com/en-us/HT214116

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214117

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214119

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214120

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214122

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214123

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT214124

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT214116

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214117

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214119

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214120

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214122

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214123

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/kb/HT214124

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.