Lucene search

K
nvd[email protected]NVD:CVE-2023-38610
HistoryJan 10, 2024 - 10:15 p.m.

CVE-2023-38610

2024-01-1022:15:48
CWE-787
web.nvd.nist.gov
1
memory corruption
macos sonoma 14
ios 17
ipados 17
unexpected system termination
kernel memory

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sonoma 14, iOS 17 and iPadOS 17. An app may be able to cause unexpected system termination or write kernel memory.

Affected configurations

NVD
Node
appleipadosRange<17.0
OR
appleiphone_osRange<17.0
OR
applemacosRange<14.0

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

Related for NVD:CVE-2023-38610