• CVE-2024-40789

发布时间: 2024年8月21日

修改时间: 2024年11月30日

概要

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.

CVSS v3 指标

NVD openEuler
Confidentiality None High
Attack Vector Network Network
CVSS评分 6.5 7.5
Attack Complexity Low High
Privileges Required None None
Scope Unchanged Unchanged
Integrity None High
User Interaction Required Required
Availability High High

安全公告

公告名 概要 发布时间
KylinSec-SA-2024-3396 An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, Safari 17.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash. 2024年8月21日

影响产品

产品 状态
KY3.4-5A webkit2gtk3 Unaffected
KY3.5.2 webkit2gtk3 Unaffected
V6 webkit2gtk3 Unaffected