CVE-2023-32434
HIGH KEVApple Ipados < 15.7.7 - Integer Overflow
Title source: ruleDescription
An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Exploits (3)
References (10)
Scores
CVSS v3
7.8
EPSS
0.5775
EPSS Percentile
98.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CISA KEV
2023-06-23
VulnCheck KEV
2023-06-21
InTheWild.io
2023-06-21
ENISA EUVD
EUVD-2023-36678
CWE
CWE-190
Status
published
Products (4)
apple/ipados
< 15.7.7
apple/iphone_os
< 15.7.7
apple/macos
11.0 - 11.7.8
apple/watchos
< 8.8.1
Published
Jun 23, 2023
KEV Added
Jun 23, 2023
Tracked Since
Feb 18, 2026