CVE-2023-27970

2023-05-0800:00:00

apple

www.cve.org

out-of-bounds write

arbitrary code execution

kernel privileges

AI Score

7.9

Confidence

High

EPSS

0.001

Percentile

22.9%

JSON

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "16.4",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213676