6.5

CVE-2023-42862

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, watchOS 9.4. Processing an image may result in disclosure of process memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AppleiPadOS Version < 16.4
AppleiPhone OS Version < 16.4
ApplemacOS Version >= 13.0 < 13.3
AppletvOS Version < 16.4
ApplewatchOS Version < 9.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.52% 0.399
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/en-us/HT213670
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213676
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213674
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT213678
Vendor Advisory
Release Notes