CVE-2023-28199

EPSS 0.06%
Published 14.08.2023 23:15:10
Last modified 21.11.2024 07:54:34
Source product-security@apple.com
Teams watchlist Login
Open Login

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. An app may be able to disclose kernel memory.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Apple ≫ macOS Version >= 13.0 < 13.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.19

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/en-us/HT213670

Vendor Advisory

Release Notes

https://nvd.nist.gov/vuln/detail/CVE-2023-28199

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-28199

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-28199

EUVD