CVE-2024-40867

Vulnerability

A custom URL scheme handling issue exists in iOS and iPadOS prior to version 18.1. Due to insufficient input validation, a remote attacker can exploit this vulnerability to break out of the Web Content sandbox. The issue is addressed in iOS 18.1 and iPadOS 18.1 [1].

Exploitation

An attacker with network access can craft a malicious URL scheme that bypasses input validation. No authentication or user interaction is required. The attacker triggers the URL scheme, leading to sandbox escape [1].

Impact

Successful exploitation allows the attacker to break out of the Web Content sandbox, potentially gaining unauthorized access to system resources or sensitive data [1].

Mitigation

The vulnerability is fixed in iOS 18.1 and iPadOS 18.1, released on October 28, 2024. Users should update their devices to the latest version to mitigate the risk [1].