CVSS 3.1 Score 3.3 of 10 (low)


Published Sep 27, 2023
Updated: Oct 12, 2023


CVE-2023-40434 is a configuration issue that has been fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. It affects various products, including QtqgG-, gdwGX4, cefo45, and many others. The vulnerability allows an app to access a user's Photos Library. The risk score is 5 out of 10, indicating a moderate level of danger. The exploitability score is 1.8 out of 10, with a base severity of low. No privileges are required for exploitation, but user interaction is required. The attack vector is local, and the impact on integrity and confidentiality is none and low respectively. The vulnerability poses a potential threat to organizations as it could lead to unauthorized access to sensitive photos stored on devices running the affected software versions. Remediation can be achieved by updating to iOS 17 or iPadOS 17 or macOS Sonoma 14 to patch the configuration issue.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-40434 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options