Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-41990
HistorySep 12, 2023 - 12:15 a.m.

Code injection

2023-09-1200:15:00
PRIOn knowledge base
www.prio-n.com
17
code injection
font file processing
arbitrary code execution
apple
ios
ipados
macos
tvos
watchos
nvd

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.8%

The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Ventura 13.2, watchOS 9.3. Processing a font file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.1.

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.8%