PT-2023-21458 · Apple · Studio Display Firmware+1

Jzhu + 2 · Published 2023-05-08 · Updated 2023-07-27 · CVE-2023-27965

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.3 Studio Display Firmware versions prior to 16.4

Description A memory corruption issue was addressed with improved state management, allowing an app to potentially execute arbitrary code with kernel privileges.

Recommendations For macOS versions prior to 13.3, update to macOS Ventura 13.3 to resolve the issue. For Studio Display Firmware versions prior to 16.4, apply the Studio Display Firmware Update 16.4 to fix the problem.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-27965

Affected Products

Studio Display Firmware

Apple Macos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-27965 · Security Note
• https://support.apple.com/en-us/HT213672 · Vendor Advisory
• https://support.apple.com/en-us/HT213670 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27965 · Vendor Advisory
• https://t.me/cibsecurity/63466 · Telegram Post