CVE-2023-38580

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.

Reserved 2023-07-20 | Published 2023-07-27 | Updated 2024-10-23 | Assigner apple

Problem types

An app may be able to execute arbitrary code with kernel privileges

Product status

Any version before 16.6
affected

Any version before 13.5
affected

Any version before 9.6
affected

References

support.apple.com/en-us/HT213841

support.apple.com/en-us/HT213843

support.apple.com/en-us/HT213848

cve.org (CVE-2023-38580)

nvd.nist.gov (CVE-2023-38580)

Download JSON