CVEvulnerability
CVE-2023-42873
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2024-02-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple ipad os (< 17.1)
• apple ipad os (>= 16.0 < 16.7.2)
• apple iphone os (< 17.1)
• apple iphone os (>= 16.0 < 16.7.2)
• apple macos (>= 12.0 < 12.7.1)
• apple macos (>= 13.0 < 13.6.1)
• apple macos 14.0
• apple tvos (< 17.1)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/HT213981 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213983 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213985 Vendor Advisory
- https://support.apple.com/en-us/HT213987 Vendor Advisory
- https://support.apple.com/en-us/HT213981 Vendor Advisory
- https://support.apple.com/en-us/HT213982 Vendor Advisory
- https://support.apple.com/en-us/HT213983 Vendor Advisory
- https://support.apple.com/en-us/HT213984 Vendor Advisory
- https://support.apple.com/en-us/HT213985 Vendor Advisory
- https://support.apple.com/en-us/HT213987 Vendor Advisory
- https://support.apple.com/kb/HT213982 support.apple.com
- https://support.apple.com/kb/HT213983 support.apple.com
- https://support.apple.com/kb/HT213984 support.apple.com
- https://support.apple.com/kb/HT213987 support.apple.com