CVE-2024-40779
📋 TL;DR
This CVE describes an out-of-bounds read vulnerability in Apple's web content processing that could cause unexpected process crashes. It affects multiple Apple operating systems and Safari browser versions. Attackers could exploit this by tricking users into visiting malicious web pages.
💻 Affected Systems
- iOS
- iPadOS
- Safari
- watchOS
- tvOS
- visionOS
- macOS Sonoma
📦 What is this software?
Ipados by Apple
Ipados by Apple
Macos by Apple
macOS is Apple's desktop and laptop operating system powering Mac computers used by millions of professionals, developers, creative professionals, and enterprise users worldwide. Built on a Unix foundation with the Darwin kernel and modern Cocoa frameworks, macOS delivers a seamless ecosystem integr...
Learn more about Macos →Safari by Apple
Tvos by Apple
Watchos by Apple
⚠️ Risk & Real-World Impact
Worst Case
Denial of service through application crashes, potentially leading to temporary unavailability of affected services or devices.
Likely Case
Application crashes when processing malicious web content, requiring restart of affected applications.
If Mitigated
Minimal impact with proper patching and security controls in place.
🎯 Exploit Status
Exploitation requires user interaction (visiting malicious web content). No public proof-of-concept has been identified in the provided references.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: iOS 16.7.9, iPadOS 16.7.9, Safari 17.6, iOS 17.6, iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6
Vendor Advisory: https://support.apple.com/en-us/HT214108
Restart Required: Yes
Instructions:
1. Open Settings app on Apple device. 2. Navigate to General > Software Update. 3. Download and install the latest available update. 4. Restart device when prompted.
🔧 Temporary Workarounds
Disable JavaScript
allTemporarily disable JavaScript in Safari to prevent processing of malicious web content.
Safari > Settings > Security > Uncheck 'Enable JavaScript'
Use Alternative Browser
allUse a non-Safari browser until patches are applied.
🧯 If You Can't Patch
- Implement web content filtering to block known malicious sites
- Restrict access to untrusted websites and enforce safe browsing policies
🔍 How to Verify
Check if Vulnerable:
Check current OS/browser version against affected versions listed above.Check Version:
iOS/iPadOS: Settings > General > About > Version; macOS: Apple menu > About This Mac > macOS version; Safari: Safari menu > About SafariVerify Fix Applied:
Verify installed version matches or exceeds patched versions listed above.📡 Detection & Monitoring
Log Indicators:
- Unexpected Safari/WebKit process crashes
- Application crash logs with memory access violations
Network Indicators:
- Requests to known malicious domains serving web content
SIEM Query:
source="apple_crash_reporter" AND process_name="Safari" OR process_name="WebKit" AND event_type="crash"🔗 References
- http://seclists.org/fulldisclosure/2024/Jul/15
- http://seclists.org/fulldisclosure/2024/Jul/16
- http://seclists.org/fulldisclosure/2024/Jul/17
- http://seclists.org/fulldisclosure/2024/Jul/18
- http://seclists.org/fulldisclosure/2024/Jul/21
- http://seclists.org/fulldisclosure/2024/Jul/22
- http://seclists.org/fulldisclosure/2024/Jul/23
- https://support.apple.com/en-us/HT214116
- https://support.apple.com/en-us/HT214117
- https://support.apple.com/en-us/HT214119
- https://support.apple.com/en-us/HT214121
- https://support.apple.com/en-us/HT214122
- https://support.apple.com/en-us/HT214123
- https://support.apple.com/en-us/HT214124
- https://www.secpod.com/blog/apple-fixes-multiple-security-vulnerabilities-in-july-2024-updates/
- http://seclists.org/fulldisclosure/2024/Jul/15
- http://seclists.org/fulldisclosure/2024/Jul/16
- http://seclists.org/fulldisclosure/2024/Jul/17
- http://seclists.org/fulldisclosure/2024/Jul/18
- http://seclists.org/fulldisclosure/2024/Jul/21
- http://seclists.org/fulldisclosure/2024/Jul/22
- http://seclists.org/fulldisclosure/2024/Jul/23
- https://lists.debian.org/debian-lts-announce/2024/09/msg00006.html
- https://support.apple.com/en-us/HT214116
- https://support.apple.com/en-us/HT214117
- https://support.apple.com/en-us/HT214119
- https://support.apple.com/en-us/HT214121
- https://support.apple.com/en-us/HT214122
- https://support.apple.com/en-us/HT214123
- https://support.apple.com/en-us/HT214124
- https://support.apple.com/kb/HT214116
- https://support.apple.com/kb/HT214117
- https://support.apple.com/kb/HT214119
- https://support.apple.com/kb/HT214122
- https://support.apple.com/kb/HT214123
- https://support.apple.com/kb/HT214124
