7.8

CVE-2023-42886

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrary code execution.

Data is provided by the National Vulnerability Database (NVD)
Apple ≫ macOS Version >= 12.0.0 < 12.7.2
Apple ≫ macOS Version >= 13.0 < 13.6.3
Apple ≫ macOS Version >= 14.0 < 14.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.05% 0.154
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://seclists.org/fulldisclosure/2023/Dec/10
Third Party Advisory
Mailing List
http://seclists.org/fulldisclosure/2023/Dec/11
Third Party Advisory
Mailing List
https://support.apple.com/en-us/HT214036
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214038
Vendor Advisory
Release Notes
https://support.apple.com/en-us/HT214037
Vendor Advisory
Release Notes