CVE-2023-41064

HIGH KEV

iOS <16.6.1- Ventura <13.5.2 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2023-41064 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added September 11, 2023. EIP tracks 4 public exploits from researchers including ctkqiang, MrR0b0t19, K4Der11000.

AI-analyzed exploit summary This script generates a malformed WebP file designed to trigger a Huffman table overflow in libwebp, leading to a buffer overflow vulnerability. The exploit constructs a RIFF header with a VP8L chunk containing crafted Huffman data to induce out-of-bounds writes.

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Exploits (4)

github WORKING POC 4 stars
by ctkqiang · gopoc
https://github.com/ctkqiang/CVE-Exploits/tree/main/CVE-2023-41064

This script generates a malformed WebP file designed to trigger a Huffman table overflow in libwebp, leading to a buffer overflow vulnerability. The exploit constructs a RIFF header with a VP8L chunk containing crafted Huffman data to induce out-of-bounds writes.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: libwebp (versions affected by CVE-2023-41064)
No auth needed
Prerequisites: Python environment · target application processing WebP files
devstral-2 · analyzed Apr 10, 2026 Full analysis →
nomisec WORKING POC 3 stars
by MrR0b0t19 · client-side
https://github.com/MrR0b0t19/CVE-2023-41064

This repository contains a Python script that crafts a malformed WebP file to trigger CVE-2023-41064, a vulnerability in LibWebP. The script generates a WebP file with specific headers and bit manipulation to exploit the vulnerability.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: LibWebP (versions affected by CVE-2023-41064)
No auth needed
Prerequisites: Python 3.x · LibWebP installed on the target system
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec STUB
by K4Der11000 · poc
https://github.com/K4Der11000/k4_cve-2023-41064

The repository provides setup instructions for a frontend (React) and backend (FastAPI) project but lacks any exploit code or technical details related to CVE-2023-41064. It appears to be a placeholder or incomplete project.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: Unknown
No auth needed
Prerequisites: Node.js · Python · React · FastAPI
devstral-2 · analyzed Feb 18, 2026 Full analysis →
nomisec WORKING POC
by MrR0b0t19 · client-side
https://github.com/MrR0b0t19/vulnerabilidad-LibWebP-CVE-2023-41064

The repository contains a Python script that crafts a malformed WebP file to trigger CVE-2023-41064, a heap buffer overflow vulnerability in LibWebP. The script generates a WebP file with specific headers and bit manipulation to exploit the vulnerability.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: LibWebP (versions affected by CVE-2023-41064)
No auth needed
Prerequisites: Python 3.x · LibWebP installed on the target system
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (9)

Core 9
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213905
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213906
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213913
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213914
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213915
Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213913
Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213915

Scores

CVSS v3 7.8
EPSS 0.8535
EPSS Percentile 99.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation active
Automatable yes
Technical Impact total

Details

CISA KEV 2023-09-11
VulnCheck KEV 2023-09-07
InTheWild.io 2023-09-07
ENISA EUVD EUVD-2023-45585
CWE
CWE-120
Status published
Products (3)
apple/ipados < 15.7.9
apple/iphone_os < 15.7.9
apple/macos 11.0 - 11.7.10
Published Sep 07, 2023
KEV Added Sep 11, 2023
Tracked Since Feb 18, 2026