PT-2023-6038 · Apple · Ios+1

Antonio Zekic + 1 · Publicado 2023-09-26 · Atualizado 2023-10-12 · CVE-2023-40431

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17 iPadOS versions prior to 17

Description The issue is related to improved memory handling and may allow an app to execute arbitrary code with kernel privileges. It is associated with a buffer overflow in the GPU driver of the operating systems.

Recommendations For iOS versions prior to 17, update to iOS 17 to resolve the issue. For iPadOS versions prior to 17, update to iPadOS 17 to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2023-06739

CVE-2023-40431

Produtos afetados

Ios

Ipados

Referências · 9

• https://osv.dev/vulnerability/CVE-2023-40431 · Aviso do Fabricante
• https://support.apple.com/kb/HT213938 · Nota
• https://support.apple.com/en-us/HT213938 · Aviso do Fabricante
• https://twitter.com/cracbot/status/1707274013352116308 · Publicação no Twitter
• http://seclists.org/fulldisclosure/2023/Oct/8 · Nota
• https://t.me/cibsecurity/71054 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-40431 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-06739 · Nota de Segurança
• https://twitter.com/CVEnew/status/1706770221577683234 · Publicação no Twitter