PT-2022-7568 · Apple+7 · Tvos+15

Dohyun Lee + 11 · Published 2022-11-23 · Updated 2025-03-11 · CVE-2023-23518

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS Monterey versions 12.6.3 and earlier macOS Ventura versions 13.2 and earlier watchOS versions 9.3 and earlier macOS Big Sur versions 11.7.3 and earlier Safari versions 16.3 and earlier tvOS versions 16.3 and earlier iOS versions 16.3 and earlier iPadOS versions 16.3 and earlier

Description The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. A remote attacker may exploit this to access confidential data, compromise data integrity, and cause a denial of service.

Recommendations For macOS Monterey versions prior to 12.6.3, update to version 12.6.3 or later. For macOS Ventura versions prior to 13.2, update to version 13.2 or later. For watchOS versions prior to 9.3, update to version 9.3 or later. For macOS Big Sur versions prior to 11.7.3, update to version 11.7.3 or later. For Safari versions prior to 16.3, update to version 16.3 or later. For tvOS versions prior to 16.3, update to version 16.3 or later. For iOS versions prior to 16.3, update to version 16.3 or later. For iPadOS versions prior to 16.3, update to version 16.3 or later.

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALSA-2023:2256

ALSA-2023:2834

BDU:2024-07324

CESA-2023_2834

CVE-2023-23518

DLA-3308-1

DSA-5340-1

DSA-5341-1

MGASA-2023-0047

RHSA-2023:2256

RHSA-2023:2834

RHSA-2023_2256

RHSA-2023_2834

RHSA-2025:10364

SUSE-SU-2023:0397-1

SUSE-SU-2023:0489-1

SUSE-SU-2023:0490-1

SUSE-SU-2023:0573-1

SUSE-SU-2023:1681-1

USN-5867-1

Affected Products

Almalinux

Astra Linux

Centos

Linuxmint

Apple Macos

Red Hat

Safari

Suse

Ubuntu

Ios

Ipados

Macos Big Sur

Macos Monterey

Macos Ventura

Tvos

Watchos

References · 116

• https://osv.dev/vulnerability/DLA-3308-1 · Vendor Advisory
• https://support.apple.com/en-us/HT213604 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-23518 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-23518 · Security Note
• https://support.apple.com/en-us/HT213606 · Vendor Advisory
• https://support.apple.com/en-us/HT213601 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5341-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-23518 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2023:2834 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42826 · Vendor Advisory
• https://support.apple.com/en-us/HT213599 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-2256.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5867-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23517 · Vendor Advisory
• https://support.apple.com/en-us/HT213600 · Vendor Advisory