Unscored CVE-2023-38580 EUVD-2023-42379GHSA-j4x8-g57h-h9h2

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An…

Published Jul 27, 2023 · Updated Oct 23, 2024 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: macOS Product: watchOS Platform: iOS Platform: macOS

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	unspecified – < 16.6	16.6
Apple	macOS	unspecified – < 13.5	13.5
Apple	watchOS	unspecified – < 9.6	9.6

Advisories 2

WID-SEC-2023-1874 Apple iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 18, 2024
WID-SEC-2023-1880 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 11, 2023

References

https://support.apple.com/en-us/HT213841
https://support.apple.com/en-us/HT213843
https://support.apple.com/en-us/HT213848