CVE-2023-42898
CVE-2023-42898
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Dec 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, watchOS 10.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2. Processing an image may lead to arbitrary code execution.
References
http://seclists.org/fulldisclosure/2023/Dec/12http://seclists.org/fulldisclosure/2023/Dec/13http://seclists.org/fulldisclosure/2023/Dec/7http://seclists.org/fulldisclosure/2023/Dec/9https://support.apple.com/en-us/HT214035https://support.apple.com/en-us/HT214036https://support.apple.com/en-us/HT214040https://support.apple.com/en-us/HT214041https://support.apple.com/kb/HT214035https://support.apple.com/kb/HT214036https://support.apple.com/kb/HT214040https://support.apple.com/kb/HT214041