Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-23524

A denial-of-service issue was addressed with improved input validation. This issue is fixed in tvOS 16.3.2, iOS 16.3.1 and iPadOS 16.3.1, watchOS 9.3.1, macOS Ventura 13.2.1. Processing a maliciously crafted certificate may lead to a denial-of-service.

Published

2023-02-27T20:15:14.640

Last Modified

2025-03-18T15:15:44.563

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Primary
CWE-400
Type: Secondary
CWE-400

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	ipados	< 16.3.1	Yes
Operating System	apple	iphone_os	< 16.3.1	Yes
Operating System	apple	macos	< 13.2.1	Yes
Operating System	apple	tvos	< 16.3.2	Yes
Operating System	apple	watchos	< 9.3.1	Yes

References

https://support.apple.com/en-us/HT213632 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213633 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213634 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213635 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213632 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213633 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213634 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213635 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)