PT-2023-8077 · Apple · Apple Macos
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 14.2
Description
The issue is related to multiple memory corruption problems that have been addressed with improved input validation. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution. The vulnerability is also described as an out-of-bounds write issue in the AppleGraphicsControl component, which can be exploited by a specially crafted file to execute arbitrary code.
Recommendations
For versions prior to 14.2, update to macOS Sonoma 14.2 to resolve the issue. As a temporary workaround, consider avoiding the use of potentially malicious files until the update is applied. Restrict access to untrusted files to minimize the risk of exploitation.
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apple Macos