7.5Hoch

CVE-2024-40815

Apple iOS and iPadOS; Apple macOS; Apple tvOS; Apple watchOS Veröffentlicht: (vor 2 Jahren)

Beschreibung

A race condition was addressed with additional validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Schwachstellentyp (CWE): CWE-352

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Apple iOS and iPadOS < 17.6
apple ipad_os < 17.6
apple iphone_os < 17.6
Apple macOS < 13.6.8, < 14.6
Apple tvOS < 17.6
Apple watchOS < 10.6

Referenzen und Patches