CVEvulnerability
CVE-2023-40436
9.1 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-09-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
- Weaknesses
- CWE-125
Description
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or read kernel memory.
Affected configurations
• apple macos (< 14.0)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- http://seclists.org/fulldisclosure/2023/Oct/3 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2023/Oct/3 Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT213940 Release Notes, Vendor Advisory
- https://support.apple.com/kb/HT213940 support.apple.com