CVE-2023-27949

Summary

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
ApplemacOSunspecified < 13.3affected
ApplemacOSunspecified < 12.6affected
AppleiOS and iPadOSunspecified < 15.7affected

Weaknesses

  • Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References