VulnerabilityAnalyzed
CVE-2023-32423
A buffer overflow issue was addressed with improved memory handling.
MEDIUM 6.5EPSS 0.79%
Does this matter?
Lower severity and a low EPSS score (0.79%). Track it; it rarely justifies an emergency change on its own.
Description
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS
- 0.79% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- apple/safari · apple/ipados · apple/iphone os · apple/macos · apple/tvos · apple/watchos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/HT213757Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213758Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213761Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213762Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213764Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213757Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213758Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213761Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213762Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213764Release Notes, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.