CVE-2023-42961

Description

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. A sandboxed process may be able to circumvent sandbox restrictions.

Reserved 2023-09-14 | Published 2025-04-11 | Updated 2025-04-14 | Assigner apple

Problem types

A path handling issue was addressed with improved validation.

Product status

Any version before 17
affected

Any version before 16.7
affected

Any version before 14
affected

Any version before 13.6
affected

Any version before 12.7
affected

References

support.apple.com/en-us/120949

support.apple.com/en-us/120329

support.apple.com/en-us/120950

support.apple.com/en-us/120337

support.apple.com/en-us/120328

cve.org (CVE-2023-42961)

nvd.nist.gov (CVE-2023-42961)

Download JSON