PT-2023-4784 · Apple · Ios+4

Gergely Kalman

+2

·

Published

2023-05-18

·

Updated

2025-07-30

·

CVE-2023-32422

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions iOS versions prior to 16.5 iPadOS versions prior to 16.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 watchOS (affected versions not specified)
Description An application may be able to bypass Privacy preferences due to insufficient protection of registration data. The issue involves SQLite logging restrictions. Exploitation may allow an attacker to bypass existing security limitations and potentially overwrite the TCC database, granting unauthorized access.
Recommendations Update iOS to version 16.5 or later. Update iPadOS to version 16.5 or later. Update tvOS to version 16.5 or later. Update macOS Ventura to version 13.4 or later.

Exploit

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2023-05232
CVE-2023-32422

Affected Products

Apple Macos
Ios
Ipados
Macos Ventura
Tvos