Unscored CVE-2023-38425 EUVD-2023-42242GHSA-q7w8-fqjp-5rf5

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be a…

Published Jul 27, 2023 · Updated Oct 22, 2024 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Platform: iOS Platform: macOS

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	unspecified – < 16.6	16.6
Apple	macOS	unspecified – < 13.5	13.5

Advisories 2

WID-SEC-2023-1874 Apple iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 18, 2024
WID-SEC-2023-1880 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 11, 2023

References

https://support.apple.com/en-us/HT213841
https://support.apple.com/en-us/HT213843