CVE-2023-32363 — Out-of-bounds Read in Apple Macos

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 99.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MacosApple Macos Ventura
Timeline
PublishedJun 23

Description

A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Ventura 13.4. An app may be able to bypass Privacy preferences.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5apple/macosunspecified — 13.4
▶NVDapple/macos< 13.4

🔴Vulnerability Details

1
GHSA
GHSA-f3qv-9r52-x874: A permissions issue was addressed by removing vulnerable code and adding additional checks↗2023-06-23
▶

📋Vendor Advisories

1
Apple
CVE-2023-32363: macOS Ventura 13.4↗2023-05-18
▶