Vulnerabilities

TI-2023-22936 CVE-2023-42848 · GHSA-48j9-xh9v-wh6m

Heap-based buffer overflow in Apple iOS and iPadOS

LOW 35

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00212 Published 2024-02-21 Fixed in 16.7, 17.1 +3 CWE-122

TI-2023-22957 CVE-2023-42873 · GHSA-5476-44cw-r459

Out-of-bounds write in Apple iOS and iPadOS

LOW 35

The issue was addressed with improved bounds checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00226 Published 2024-02-21 Fixed in 16.7, 17.1 +3 CWE-787

TI-2023-22914 CVE-2023-42823 · GHSA-7279-4rvf-3vm5

Insecure storage of sensitive information in Apple iOS and iPadOS

LOW 25

The issue was resolved by sanitizing logging This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00457 Published 2024-02-21 Fixed in 16.7, 17.1 +4 CWE-922

TI-2023-22931 CVE-2023-42843 · GHSA-2c3h-gr5x-3fh2

Authentication bypass by spoofing in Apple iOS and iPadOS

LOW 37

An inconsistent user interface issue was addressed with improved state management.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00973 Published 2024-02-21 Partial fix · 16.7, 17.1 +1 CWE-290

TI-2023-23019 CVE-2023-42942 · GHSA-gqvf-8g7j-7gh5

Link following in Apple iOS and iPadOS

LOW 36

This issue was addressed with improved handling of symlinks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00391 Published 2024-02-21 Fixed in 16.7, 17.1 +3 CWE-59