Released July 29, 2024
CVE-2024-40789
Overview
Impact:
Description: Processing maliciously crafted web content may lead to an unexpected process crash
Researchers: Seunghyun Lee (@0x10n) of KAIST Hacking Lab working with Trend Micro Zero Day Initiative
Background
Advisory: Apple Security Advisory
| Attribute | Value |
|---|---|
| CVE | CVE-2024-40789 |
| Bugzilla | None |
| Component | WebKit |
| Bug Class | OOB |
| Severity | medium |
| Advisory | Apple Advisory |
Root Cause Analysis
An out-of-bounds access issue was addressed with improved bounds checking.
Audit Directions
When auditing for this vulnerability, focus on: (1) similar patterns in the patched functions and nearby code, (2) missing or insufficient bounds checks on user-controlled input, (3) unvalidated type conversions and pointer arithmetic, (4) edge cases not exercised by tests, and (5) copy-paste variants of the vulnerable logic elsewhere.