Description
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | >= unspecified, < 17.2 |
| Apple | iOS and iPadOS | >= unspecified, < 17.2 |
| Apple | tvOS | >= unspecified, < 17.2 |
| Apple | macOS | >= unspecified, < 14.2 |
| Apple | watchOS | >= unspecified, < 10.2 |
| apple | safari | < 17.2 |
| apple | iphone_os | < 17.2 |
| apple | ipad_os | < 17.2 |
| apple | tvos | < 17.2 |
| apple | macos | < 14.2 |
| apple | watchos | < 10.2 |
References
- http://www.openwall.com/lists/oss-security/2024/03/26/1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/
- https://support.apple.com/en-us/HT214035Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214036Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214039Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214040Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214041Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214039
- http://www.openwall.com/lists/oss-security/2024/03/26/1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/
- https://security.netapp.com/advisory/ntap-20241018-0009/
- https://support.apple.com/en-us/HT214035Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214036Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214039Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214040Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT214041Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT214039
Timeline
- Published
- Mar 28, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified