CVE-2023-32366

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Jan 10, 2024
Updated: Jan 18, 2024
CWE ID 787

Summary

CVE-2023-32366 is a vulnerability affecting multiple Apple operating systems, including macOS Big Sur, macOS Ventura, iOS, and iPadOS. An out-of-bounds write issue, which allows arbitrary code execution, was identified in the processing of font files. This issue has been addressed with improved input validation in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4, and iPadOS 16.4, as well as in macOS Monterey 12.6.4, iOS 15.7.4, and iPadOS 15.7.4. Users are advised to apply the relevant patches to protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apple (iPhone OS)
  • MacOS
  • iPadOS

Affected Vendors

  • Apple