CVE-2023-27936

HIGH

iPadOS < 15.7.4 - Out-of-bounds Write

Title source: llm
STIX 2.1

Description

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to cause unexpected system termination or write kernel memory.

References (4)

Core 4
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213670
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213673
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213675
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213677

Scores

CVSS v3 7.8
EPSS 0.0006
EPSS Percentile 18.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (3)
apple/ipados < 15.7.4
apple/iphone_os < 15.7.4
apple/macos < 11.7.5
Published May 08, 2023
Tracked Since Feb 18, 2026