Lucene search

[email protected]CVE-2023-42928

HistoryFeb 21, 2024 - 7:15 a.m.

CVE-2023-42928

2024-02-2107:15:50

[email protected]

web.nvd.nist.gov

3074

cve-2023-42928

bounds checks

ios 17.1

ipados 17.1

security

vulnerability

privilege escalation

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The issue was addressed with improved bounds checks. This issue is fixed in iOS 17.1 and iPadOS 17.1. An app may be able to gain elevated privileges.

Affected configurations

Vulners

Node

appleiphone_osRange<17.1

appleipad_osRange<17.1

VendorProductVersionCPE
appleiphone_os*cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
appleipad_os*cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	iphone_os	*	cpe:2.3:o:apple:iphone_os::::::::
apple	ipad_os	*	cpe:2.3:o:apple:ipad_os::::::::

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "17.1",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213982