CVE-2023-28185

An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. An app may be able to cause a denial-of-service.
References
Link Resource
https://support.apple.com/en-us/HT213673 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213674 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213675 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213676 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213677 Release Notes Vendor Advisory
https://support.apple.com/en-us/HT213678 Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

17 Jan 2024, 22:16

Type Values Removed Values Added
References () https://support.apple.com/en-us/HT213677 - () https://support.apple.com/en-us/HT213677 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213674 - () https://support.apple.com/en-us/HT213674 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213673 - () https://support.apple.com/en-us/HT213673 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213675 - () https://support.apple.com/en-us/HT213675 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213676 - () https://support.apple.com/en-us/HT213676 - Release Notes, Vendor Advisory
References () https://support.apple.com/en-us/HT213678 - () https://support.apple.com/en-us/HT213678 - Release Notes, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE CWE-190
First Time Apple
Apple iphone Os
Apple macos
Apple ipados
Apple watchos
Apple tvos
CPE cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

10 Jan 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-10 22:15

Updated : 2024-02-28 20:54


NVD link : CVE-2023-28185

Mitre link : CVE-2023-28185

CVE.ORG link : CVE-2023-28185


JSON object : View

Products Affected

apple

  • macos
  • watchos
  • iphone_os
  • ipados
  • tvos
CWE
CWE-190

Integer Overflow or Wraparound