VulnerabilityModified
CVE-2024-40790
The issue was addressed with improved handling of caches.
MEDIUM 5.5EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
The issue was addressed with improved handling of caches. This issue is fixed in visionOS 2. An app may be able to read sensitive data from the GPU memory.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Affected
- apple/visionos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/121249Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2024/Sep/36
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.