Skip to content
fr Sign in
7.5 High

CVE-2024-40815 A race condition was addressed with additional validation

Description

A race condition was addressed with additional validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, macOS Ventura 13.6.8, tvOS 17.6, watchOS 10.6. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

Affected products and versions

Product Affected versions Fixed in
iOS and iPadOS 17.6 earliest → < 17.6 17.6
macOS 14.6 earliest → < 14.6 14.6
macOS 13.6 earliest → < 13.6.8 13.6.8
watchOS 10.6 earliest → < 10.6 10.6
tvOS 17.6 earliest → < 17.6 17.6
iphone_os 17.6 earliest → < 17.6 17.6
ipad_os 17.6 earliest → < 17.6 17.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of iOS and iPadOS

The 2049 CVEs of iOS and iPadOS →
CVE-2026-86925 An authorization issue was addressed with improved state management 5.5 Medium CVE-2026-84627 A buffer overflow was addressed with improved bounds checking 7.8 High CVE-2026-86972 A buffer overflow was addressed with improved size validation 7.8 High CVE-2026-113912 An out-of-bounds access issue was addressed with improved bounds checking 7.1 High
Track this CVE