CVE-2023-42884 | BDVDB-2026-219043 Detail
AppleiOS and iPadOS
Description#
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. An app may be able to disclose kernel memory.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References#
- https://support.apple.com/en-us/HT214035
- https://support.apple.com/en-us/HT214034
- https://support.apple.com/en-us/HT214038
- https://support.apple.com/en-us/HT214040
- https://support.apple.com/en-us/HT214036
- http://seclists.org/fulldisclosure/2023/Dec/9
- http://seclists.org/fulldisclosure/2023/Dec/7
- http://seclists.org/fulldisclosure/2023/Dec/10
- http://seclists.org/fulldisclosure/2023/Dec/8
- http://seclists.org/fulldisclosure/2023/Dec/12
- https://support.apple.com/kb/HT214040
- https://support.apple.com/kb/HT214038
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214035
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.