PT-2023-6038

CVE-2023-40431

Published

2023-09-26

Updated

2023-10-12

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17 iPadOS versions prior to 17

Description The issue is related to improved memory handling and may allow an app to execute arbitrary code with kernel privileges. It is associated with a buffer overflow in the GPU driver of the operating systems.

Recommendations For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Antonio Zekic

Antoniozekic

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2023-40431