CVE-2023-42956

2024-03-2815:39:18

apple

github.com

improved memory handling

safari

ios

ipados

macos

denial-of-service

AI Score

5.7

Confidence

Low

EPSS

0.001

Percentile

29.1%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "Safari",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "17.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "14.2",
        "versionType": "custom"
      }
    ]
  }
]