CVE-2023-32424

2024-01-1022:03:32

apple

www.cve.org

cve-2023-32424

kernel code execution

memory mitigations

AI Score

Confidence

High

EPSS

0.001

Percentile

16.1%

JSON

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.4 and iPadOS 16.4, watchOS 9.4. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "iOS and iPadOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "16.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "watchOS",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "9.4",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213676

support.apple.com/en-us/HT213678