Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-42888

The issue was addressed with improved checks. This issue is fixed in iOS 16.7.5 and iPadOS 16.7.5, watchOS 10.2, macOS Ventura 13.6.4, macOS Sonoma 14.2, macOS Monterey 12.7.3, iOS 17.2 and iPadOS 17.2. Processing a maliciously crafted image may result in disclosure of process memory.

Published

2024-01-23T01:15:09.980

Last Modified

2025-06-16T19:15:23.777

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Primary
NVD-CWE-noinfo
Type: Secondary
CWE-200

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	apple	ipados	< 16.7.5	Yes
Operating System	apple	ipados	< 17.2	Yes
Operating System	apple	iphone_os	< 16.7.5	Yes
Operating System	apple	iphone_os	< 17.2	Yes
Operating System	apple	macos	< 12.7.3	Yes
Operating System	apple	macos	< 13.6.4	Yes
Operating System	apple	macos	< 14.2	Yes
Operating System	apple	watchos	< 10.2	Yes

References

http://seclists.org/fulldisclosure/2024/Jan/34 Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2024/Jan/37 Third Party Advisory ([email protected])
http://seclists.org/fulldisclosure/2024/Jan/38 Third Party Advisory ([email protected])
https://support.apple.com/en-us/HT214035 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214036 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214041 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214057 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214058 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT214063 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/kb/HT214035 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/kb/HT214036 Release Notes, Vendor Advisory ([email protected])
https://support.apple.com/kb/HT214041 Release Notes, Vendor Advisory ([email protected])
http://seclists.org/fulldisclosure/2024/Jan/34 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jan/37 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://seclists.org/fulldisclosure/2024/Jan/38 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214035 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214036 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214041 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214057 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214058 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT214063 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214035 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214036 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/kb/HT214041 Release Notes, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)