CVE-2017-13835 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Macos

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

7.8HIGHNVD

EPSS

0.4%

top 41.26%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple MAC OS X

Timeline

PublishedDec 23

Latest updateDec 24

Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. An application may be able to execute arbitrary code with elevated privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5apple/macosunspecified — 10.13

▶NVDapple/mac_os_x< 10.13

🔴Vulnerability Details

GHSA

GHSA-526c-j6vh-vw72: A memory corruption issue was addressed with improved memory handling↗2021-12-24

▶

CVEList

CVE-2017-13835: A memory corruption issue was addressed with improved memory handling↗2021-12-23

▶

📋Vendor Advisories

Apple

CVE-2017-13835: macOS High Sierra 10.13↗2017-09-25

▶