CVEvulnerability
CVE-2023-42848
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-02-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-122, CWE-787
Description
The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. Processing a maliciously crafted image may lead to heap corruption.
Affected configurations
• apple ipad os (< 16.7.2)
• apple ipad os (>= 17.0 < 17.1)
• apple iphone os (< 16.7.2)
• apple iphone os (>= 17.0 < 17.1)
• apple macos (>= 13.0 < 13.6.1)
• apple macos 14.0
• apple tvos (< 17.1)
• apple watchos (< 10.1)
Related
References
- https://support.apple.com/en-us/HT213981 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213985 Vendor Advisory
- https://support.apple.com/en-us/HT213987 Vendor Advisory
- https://support.apple.com/en-us/HT213988 Vendor Advisory
- https://support.apple.com/en-us/HT213981 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213985 Vendor Advisory
- https://support.apple.com/en-us/HT213987 Vendor Advisory
- https://support.apple.com/en-us/HT213988 Vendor Advisory
- https://support.apple.com/kb/HT213982 support.apple.com
- https://support.apple.com/kb/HT213984 support.apple.com
- https://support.apple.com/kb/HT213988 support.apple.com