CVE-2023-27936 — Out-of-bounds Write in Apple IOS AND Ipados

CWE-787 — Out-of-bounds WriteCWE-150 — Improper Neutralization of Escape, Meta, or Control Sequences7 documents4 sources
Severity
7.8HIGHNVD
GHSA8.8
EPSS
0.0%
top 90.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Apple IOS AND IpadosApple MacosApple Ipados+7 more
Timeline
PublishedMay 8
Latest updateMar 5

Description

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to cause unexpected system termination or write kernel memory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages11 packages

▶Appleapple/macos_monterey12.6.4
▶CVEListV5apple/macosunspecified — 13.3+2
▶NVDapple/macos12.0 — 12.6.4+2
▶Appleapple/macos_big_sur11.7.5

🔴Vulnerability Details

2
GHSA
Deno's deno_runtime vulnerable to interactive permission prompt spoofing via improper ANSI stripping↗2024-03-05
▶
GHSA
GHSA-2jh3-9748-5hjh: An out-of-bounds write issue was addressed with improved input validation↗2023-05-08
▶

📋Vendor Advisories

4
Apple
CVE-2023-27936: macOS Big Sur 11.7.5↗2023-03-27
▶
Apple
CVE-2023-27936: macOS Monterey 12.6.4↗2023-03-27
▶
Apple
CVE-2023-27936: macOS Ventura 13.3↗2023-03-27
▶
Apple
CVE-2023-27936: iOS 15.7.4 and iPadOS 15.7.4↗2023-03-27
▶