CVE-2023-32366

2024-01-1022:03:28

apple

github.com

macos

ios

input validation

cve-2023-32366

font file.

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. Processing a font file may lead to arbitrary code execution.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
      "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "ipados",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "15.7.4",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "16.0",
        "lessThan": "16.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "macos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "11.7.5",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "12.0",
        "lessThan": "12.6.4",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "13.0",
        "lessThan": "13.3",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]