CVEvulnerability
CVE-2023-38580
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-07-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple ipados (< 16.6)
• apple iphone os (< 16.6)
• apple macos (>= 13.0 < 13.5)
• apple watchos (< 9.6)
References
- https://support.apple.com/en-us/HT213841 Vendor Advisory
- https://support.apple.com/en-us/HT213843 Vendor Advisory
- https://support.apple.com/en-us/HT213848 Vendor Advisory
- https://support.apple.com/en-us/HT213841 Vendor Advisory
- https://support.apple.com/en-us/HT213843 Vendor Advisory
- https://support.apple.com/en-us/HT213848 Vendor Advisory