Visionos
CVE-2024-40790
MEDIUM
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
1DescriptionNVD
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory.
AnalysisAI
The issue was addressed with improved handling of caches. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory. Affected products include: Apple Visionos.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
WebKit memory corruption in Safari 18.6 and multiple Apple platforms allows remote code execution when processing malici
An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerab
The issue was addressed with improved memory handling. Rated critical severity (CVSS 9.8), this vulnerability is remotel
Memory corruption vulnerabilities in Apple's graphics texture processing engine across iOS, iPadOS, macOS, tvOS, visionO
Buffer overflow memory corruption in Apple file parsing components allows remote code execution across iOS 18.6, iPadOS
Out-of-bounds write vulnerability in WebKit across Apple's entire operating system ecosystem allows remote code executio
Unauthenticated access to Hidden Photos Album in Apple iOS, iPadOS, macOS, and visionOS allows remote attackers to view
An issue in the handling of URL protocols was addressed with improved logic. Rated critical severity (CVSS 9.3), this vu
An integer overflow was addressed with improved input validation. Rated high severity (CVSS 8.8), this vulnerability is
Memory handling flaws in Apple's operating systems allow unauthenticated remote attackers to cause information disclosur
The issue was addressed with improved bounds checks. Rated high severity (CVSS 8.8), this vulnerability is remotely expl
The issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely ex
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today