CVE-2024-23208

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3, watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3. An app may be able to execute arbitrary code with kernel privileges.

Reserved 2024-01-12 | Published 2024-01-23 | Updated 2024-10-21 | Assigner apple

Problem types

An app may be able to execute arbitrary code with kernel privileges

Product status

Any version before 17.3
affected

Any version before 17.3
affected

Any version before 10.3
affected

Any version before 14.3
affected

References

support.apple.com/en-us/HT214059

support.apple.com/en-us/HT214055

support.apple.com/en-us/HT214060

support.apple.com/en-us/HT214061

seclists.org/fulldisclosure/2024/Jan/33

seclists.org/fulldisclosure/2024/Jan/36

seclists.org/fulldisclosure/2024/Jan/39

seclists.org/fulldisclosure/2024/Jan/40

cve.org (CVE-2024-23208)

nvd.nist.gov (CVE-2024-23208)

Download JSON