What is the severity of CVE-2024-40839?

The severity of CVE-2024-40839 is categorized as high due to potential memory handling issues that can lead to security vulnerabilities.

How do I fix CVE-2024-40839?

To fix CVE-2024-40839, users should update their devices to the latest version of iOS or iPadOS, specifically version 17.5.

Which devices are affected by CVE-2024-40839?

CVE-2024-40839 affects Apple devices running iOS and iPadOS versions prior to 17.5.

What types of issues does CVE-2024-40839 address?

CVE-2024-40839 addresses issues related to memory handling and improper validation of environment variables.

Is there a workaround for CVE-2024-40839 before the update?

There are no official workarounds for CVE-2024-40839 other than upgrading to the patched version 17.5.

Vulnerability/
CVE-2024-40839

low

2.4

CWE

862 20 362

13/5/2024

15/1/2025

16/1/2025

CVE-2024-40839: Input Validation

First published: Mon May 13 2024(Updated: )

Apple Neural Engine. The issue was addressed with improved memory handling.

Credit: product-security@apple.com Minghao Lin Baidu Security Baidu SecurityYe Zhang @VAR10CK Baidu SecurityMeysam Firouzi @R00tkitSMM Mickey Jin @patch1t an anonymous researcher an anonymous researcher Kirin @Pwnrin 小来来 @Smi1eSEC pattern-f @pattern_F_ Ant Security LightAmir Bazine CrowdStrike Counter Adversary OperationsKarsten König CrowdStrike Counter Adversary Operationsan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappMeysam Firouzi @R00tkitSMM Mickey Jin @patch1t an anonymous researcher an anonymous researcher Kirin @Pwnrin 小来来 @Smi1eSEC pattern-f @pattern_F_ Ant Security LightAmir Bazine CrowdStrike Counter Adversary OperationsKarsten König CrowdStrike Counter Adversary Operationsan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher an anonymous researcher Kirin @Pwnrin 小来来 @Smi1eSEC pattern-f @pattern_F_ Ant Security LightAmir Bazine CrowdStrike Counter Adversary OperationsKarsten König CrowdStrike Counter Adversary Operationsan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappKirin @Pwnrin 小来来 @Smi1eSEC pattern-f @pattern_F_ Ant Security LightAmir Bazine CrowdStrike Counter Adversary OperationsKarsten König CrowdStrike Counter Adversary Operationsan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassapppattern-f @pattern_F_ Ant Security LightAmir Bazine CrowdStrike Counter Adversary OperationsKarsten König CrowdStrike Counter Adversary Operationsan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher Kirin @Pwnrin 小来来 @Smi1eSEC pattern-f @pattern_F_ Ant Security LightAmir Bazine CrowdStrike Counter Adversary OperationsKarsten König CrowdStrike Counter Adversary Operationsan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappAmir Bazine CrowdStrike Counter Adversary OperationsKarsten König CrowdStrike Counter Adversary Operationsan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher Lucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappAlexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappJunsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassapppattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappGil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappPan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappLucas Monteiro Daniel Monteiro Felipe Monteiro Alexander Heinrich SEEMOO TU Darmstadt @Sn0wfreeze Shai Mishali @freak4pc CertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappCertiK SkyFall Team Junsung Lee Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG Ptepattern-f @pattern_F_ Ant Security Lightan anonymous researcher an anonymous researcher MIT CSAIL MIT CSAILJoseph Ravichandran @0xjprx MIT CSAILPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappPr BarPr Hebrew University EP Nick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappNick Wellnhofer an anonymous researcher Gil Pedersen Dohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappMickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappMeysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappLFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappAdam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappDohyun Lee @l33d0hyun LFY @secsys Fudan UniversityTalal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncDaniel Zajork Joshua Zajork Meysam Firouzi @R00tkitsmm Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeAndr.Ess Adam Berry Mickey Jin @patch1t an anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappCVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappSrijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappan anonymous researcher Csaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappCsaba Fitzl @theevilbit KandjiKirin @Pwnrin LFY @secsys 小来来 @Smi1eSEC yulige Snoolie Keffaber @0xilis Robert Reichel an anonymous researcher Srijan Poudel CVE-2024-27806 Abhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassappAbhay Kailasia @abhay_kailasia Lakshmi Narain College of Technology BhopalCsaba Fitzl @theevilbit KandjiRomy R. Mickey Jin @patch1t Mickey Jin @patch1t ajajfxhj Maksymilian Motyl Immunity SystemsJunsung Lee Trend Micro Zero Day Initiative ajajfxhj Manfred Paul @_manfp Trend Micro's Zero Day InitiativeEmilio Cobos MozillaLukas Bernhard CISPA Helmholtz Center for Information Securityan anonymous researcher Manfred Paul @_manfp Trend Micro Zero Day InitiativeNan Wang @eternalsakura13 360 Vulnerability Research InstituteJoe Rutkowski @Joe12387 Crawless @abrahamjuliot Jeff Johnson underpassapp

Affected Software	Affected Version	How to fix
Apple iOS	<17.5
Apple iPadOS	<17.5
	<17.5	17.5
	<17.5	17.5

Never miss a vulnerability like this again

Reference Links

https://support.apple.com/en-us/120905 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

APPLE-120905

Frequently Asked Questions

What is the severity of CVE-2024-40839?
The severity of CVE-2024-40839 is categorized as high due to potential memory handling issues that can lead to security vulnerabilities.
How do I fix CVE-2024-40839?
To fix CVE-2024-40839, users should update their devices to the latest version of iOS or iPadOS, specifically version 17.5.
Which devices are affected by CVE-2024-40839?
CVE-2024-40839 affects Apple devices running iOS and iPadOS versions prior to 17.5.
What types of issues does CVE-2024-40839 address?
CVE-2024-40839 addresses issues related to memory handling and improper validation of environment variables.
Is there a workaround for CVE-2024-40839 before the update?
There are no official workarounds for CVE-2024-40839 other than upgrading to the patched version 17.5.

agent/references
agent/type
agent/first-publish-date
agent/description
agent/author
collector/nvd-api
source/NVD
agent/weakness
agent/severity
agent/last-modified-date
agent/event
agent/source
collector/mitre-cve
source/MITRE
agent/guess-ai
agent/software-canonical-lookup
agent/softwarecombine
agent/tags
collector/apple-support
source/Apple
alias/CVE-2024-27804
alias/CVE-2024-27816
alias/CVE-2024-40771
alias/CVE-2024-27841
alias/CVE-2024-27805
alias/CVE-2024-27817
alias/CVE-2024-27831
alias/CVE-2024-27832
alias/CVE-2024-44136
alias/CVE-2024-27839
alias/CVE-2024-27801
alias/CVE-2024-27836
alias/CVE-2024-27828
alias/CVE-2024-27818
alias/CVE-2024-27840
alias/CVE-2024-27815
alias/CVE-2024-27823
alias/CVE-2024-27811
alias/CVE-2023-42893
alias/CVE-2024-23251
alias/CVE-2024-23282
alias/CVE-2024-27810
alias/CVE-2024-27852
alias/CVE-2024-27800
alias/CVE-2024-27802
alias/CVE-2024-27857
alias/CVE-2024-27835
alias/CVE-2024-27845
alias/CVE-2024-27803
alias/CVE-2024-27821
alias/CVE-2024-27855
alias/CVE-2024-27819
alias/CVE-2024-27806
alias/CVE-2024-40839
alias/CVE-2024-27848
alias/CVE-2024-27807
alias/CVE-2024-27847
alias/CVE-2024-27884
alias/CVE-2024-27796
alias/CVE-2024-27856
alias/CVE-2024-27834
alias/CVE-2024-27838
alias/CVE-2024-27808
alias/CVE-2024-27850
alias/CVE-2024-27833
alias/CVE-2024-27851
alias/CVE-2024-27830
alias/CVE-2024-27820
vendor/apple
canonical/apple ios
canonical/apple ipados