CVE-2024-23258

2024-03-0801:36:03

apple

github.com

out of bounds read

input validation

visionos

macos sonoma

arbitrary code execution

image processing

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

An out-of-bounds read was addressed with improved input validation. This issue is fixed in visionOS 1.1, macOS Sonoma 14.4. Processing an image may lead to arbitrary code execution.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:apple:visionos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "visionos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "apple",
    "product": "macos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "14.4",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]