PT-2023-21458

CVE-2023-27965

Published

2023-05-08

Updated

2023-07-27

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.3 Studio Display Firmware versions prior to 16.4

Description A memory corruption issue was addressed with improved state management, allowing an app to potentially execute arbitrary code with kernel privileges.

Recommendations For macOS versions prior to 13.3, update to macOS Ventura 13.3 to resolve the issue. For Studio Display Firmware versions prior to 16.4, apply the Studio Display Firmware Update 16.4 to fix the problem.

Exploitability

Fix

Impacts

Researchers

Jzhu

Meysam Firouzi

R00Tkitsmm

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers