CVE-2023-38590

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory.

Affected Software

VendorProductVersion RangeStatus
AppletvOSunspecified < 16.6affected
AppleiOS and iPadOSunspecified < 16.6affected
ApplemacOSunspecified < 13.5affected
AppleiOS and iPadOSunspecified < 15.7affected
ApplemacOSunspecified < 11.7affected
ApplemacOSunspecified < 12.6affected
ApplewatchOSunspecified < 9.6affected

Weaknesses

  • A remote user may be able to cause unexpected system termination or corrupt kernel memory

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References