PT-2023-8347

CVE-2023-42882

Published

2023-12-11

Updated

2024-02-02

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 14.2

Description The issue is related to a buffer overflow in the AppleVA component of the macOS operating system, which can lead to arbitrary code execution when processing an image. This is due to improper memory handling.

Recommendations For versions prior to 14.2, update to macOS Sonoma 14.2 to resolve the issue. As a temporary workaround, consider avoiding the processing of images from untrusted sources until the update is applied.

Exploitability

Exploit

Fix

Impacts

Researchers

Ivan Fratric

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-787: Out-of-bounds Write

Related identifiers