CVE-2023-40408

MEDIUM

iPadOS < 16.7.2 - Uncontrolled Resource Consumption

Title source: llm
STIX 2.1

Description

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Hide My Email may be deactivated unexpectedly.

References (12)

Core 12
Core References
Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/19
Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/23
Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/24
Mailing List, Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/25
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213981
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213982
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213984
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213988
Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213981
Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213982
Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213984
Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213988

Scores

CVSS v3 5.3
EPSS 0.0019
EPSS Percentile 41.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-400
Status published
Products (4)
apple/ipados < 16.7.2
apple/iphone_os < 16.7.2
apple/macos 14.0
apple/watchos < 10.1
Published Oct 25, 2023
Tracked Since Feb 18, 2026