Released July 29, 2024
CVE-2024-44206
CVSS 9.3
severity critical
vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Overview
Impact:
Description: A user may be able to bypass some web content restrictions
Researchers: Andreas Jaegersberger and Ro Achterberg
Background
Advisory: Apple Security Advisory
| Attribute | Value |
|---|---|
| CVE | CVE-2024-44206 |
| Bugzilla | 280765 |
| Component | WebKit |
| Bug Class | LogicError |
| Severity | high |
| Advisory | Apple Advisory |
Fix not public. The WebKit fix for this bug is embargoed or not yet disclosed. The bug ID is confirmed from the Apple advisory, but no public commit references it.
Audit Directions
When auditing for this vulnerability, focus on: (1) similar patterns in the patched functions and nearby code, (2) missing or insufficient bounds checks on user-controlled input, (3) unvalidated type conversions and pointer arithmetic, (4) edge cases not exercised by tests, and (5) copy-paste variants of the vulnerable logic elsewhere.