CVE-2023-27949: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS…

PriorityP339high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

0.25%

16.5th percentile

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
apple	ios_15.7.4_and_ipados	—	—
apple	ios_and_ipados	>= unspecified < 15.7	15.7
apple	ipados	< 15.7.4	15.7.4
apple	iphone_os	< 15.7.4	15.7.4
apple	macos	>= 12.0 < 12.6.4	12.6.4
apple	macos	>= 13.0 < 13.3	13.3
apple	macos	>= unspecified < 13.3	13.3
apple	macos	>= unspecified < 12.6	12.6
apple	macos_monterey	—	—
apple	macos_ventura	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.