CVE-2023-42888 | BDVDB-2026-222732 Detail
AppleiOS and iPadOS
Description#
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS Monterey 12.7.3, iOS 17.2 and iPadOS 17.2. Processing a maliciously crafted image may result in disclosure of process memory.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.
Weaknesses#
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References#
- https://support.apple.com/en-us/HT214035
- https://support.apple.com/en-us/HT214058
- https://support.apple.com/en-us/HT214063
- https://support.apple.com/en-us/HT214036
- https://support.apple.com/en-us/HT214041
- https://support.apple.com/en-us/HT214057
- https://support.apple.com/kb/HT214036
- https://support.apple.com/kb/HT214035
- https://support.apple.com/kb/HT214041
- http://seclists.org/fulldisclosure/2024/Jan/34
- http://seclists.org/fulldisclosure/2024/Jan/37
- http://seclists.org/fulldisclosure/2024/Jan/38
- https://support.apple.com/kb/HT214063
- https://support.apple.com/kb/HT214058
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.