medium5.5
CVE-2023-42888
The issue was addressed with improved checks.
Impact
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS Monterey 12.7.3, iOS 17.2 and iPadOS 17.2. Processing a maliciously crafted image may result in disclosure of process memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | after 16.0 before 16.7.5 after 17.0 before 17.2 |
| Apple | Iphone Os | after 16.0 before 16.7.5 after 17.0 before 17.2 |
| Apple | Macos | from 12.0 before 12.7.3 from 13.0 before 13.6.4 from 14.0 before 14.2 |
| Apple | Watchos | before 10.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2024/Jan/34
- http://seclists.org/fulldisclosure/2024/Jan/37
- http://seclists.org/fulldisclosure/2024/Jan/38
- https://support.apple.com/en-us/HT214035
- https://support.apple.com/en-us/HT214036
- https://support.apple.com/en-us/HT214041
- https://support.apple.com/en-us/HT214057
- https://support.apple.com/en-us/HT214058
- https://support.apple.com/en-us/HT214063
- https://support.apple.com/kb/HT214035
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214041
- http://seclists.org/fulldisclosure/2024/Jan/34
- http://seclists.org/fulldisclosure/2024/Jan/37
- http://seclists.org/fulldisclosure/2024/Jan/38
- https://support.apple.com/en-us/HT214035
- https://support.apple.com/en-us/HT214036
- https://support.apple.com/en-us/HT214041
- https://support.apple.com/en-us/HT214057
- https://support.apple.com/en-us/HT214058
- https://support.apple.com/en-us/HT214063
- https://support.apple.com/kb/HT214035
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214041
- https://support.apple.com/kb/HT214058