CVE-2023-42841

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - product-security@apple.com

Published

2023-10-25

Last modified

2025-02-13

Weaknesses

CWE-119

Affected products

• Ios And Ipados (Apple)
• Ipados (Apple)
• Iphone Os (Apple)
• Macos (Apple)

References

• http://seclists.org/fulldisclosure/2023/Oct/19
• http://seclists.org/fulldisclosure/2023/Oct/23
• http://seclists.org/fulldisclosure/2023/Oct/24
• http://seclists.org/fulldisclosure/2023/Oct/26
• https://support.apple.com/en-us/HT213981
• https://support.apple.com/en-us/HT213982
• https://support.apple.com/en-us/HT213984
• https://support.apple.com/en-us/HT213985
• https://support.apple.com/kb/HT213981
• https://support.apple.com/kb/HT213982
• https://support.apple.com/kb/HT213984
• https://support.apple.com/kb/HT213985