High · 7.8 CVE-2023-27970 EUVD-2023-31696GHSA-mpr9-5w6h-9r45

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be ab…

Published May 8, 2023 · Updated Jan 29, 2025 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Platform: iOS

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	unspecified – < 16.4	16.4

Advisories 1

WID-SEC-2023-0778 Apple iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 18, 2024

References

https://support.apple.com/en-us/HT213676

EUVD	v3.1	7.8
CISA-ADP	v3.1	7.8