CVE-2023-32366

HIGH

iPadOS < 15.7.4 - Out-of-bounds Write via Font File Processing

Title source: llm
STIX 2.1

Description

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.7.5, macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4. Processing a font file may lead to arbitrary code execution.

References (5)

Core 5
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213670
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213673
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213675
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213676
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213677

Scores

CVSS v3 7.8
EPSS 0.0008
EPSS Percentile 23.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (3)
apple/ipados < 15.7.4
apple/iphone_os < 15.7.4
apple/macos < 11.7.5
Published Jan 10, 2024
Tracked Since Feb 18, 2026