VulnerabilityModified
CVE-2024-23257
Processing an image may result in disclosure of process memory.
LOW 3.3EPSS 0.45%
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, visionOS 1.1. Processing an image may result in disclosure of process memory.
- CVSS 3.1
- 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- apple/ipados · apple/iphone os · apple/macos · apple/visionos
- Source
- product-security@apple.com
References
- https://support.apple.com/en-us/120880
- https://support.apple.com/en-us/120883
- https://support.apple.com/en-us/120884
- https://support.apple.com/en-us/120886
- https://support.apple.com/en-us/120895
- http://seclists.org/fulldisclosure/2024/Mar/21Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/22Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/23Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2024/Mar/26Mailing List, Third Party Advisory
- https://support.apple.com/en-us/HT214082Vendor Advisory
- https://support.apple.com/en-us/HT214083Vendor Advisory
- https://support.apple.com/en-us/HT214084Vendor Advisory
- https://support.apple.com/en-us/HT214085Vendor Advisory
- https://support.apple.com/en-us/HT214087Vendor Advisory
- https://support.apple.com/kb/HT214082
- https://support.apple.com/kb/HT214083
- https://support.apple.com/kb/HT214084
- https://support.apple.com/kb/HT214085
- https://support.apple.com/kb/HT214087
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.