CVE-2023-42862
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-42862 is a vulnerability that affects various Apple products, including macOS Ventura 13.3, tvOS 16.4, iOS 16.4, iPadOS 16.4, and watchOS 9.4. The vulnerability involves an out-of-bounds read which can be exploited when processing an image, potentially leading to the disclosure of process memory. To remediate this issue, users should update their affected products to the fixed versions mentioned above. The vulnerability has a medium severity rating with a base score of 6.5 according to CVSS version 3.1. It does not require any privileges and requires user interaction over a network connection. While it does not have an impact on integrity, it poses a high risk to the confidentiality of data in an organization.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions