CVE-2023-23531

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

CVSS v3 8.6 HIGH

8.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://support.apple.com/en-us/HT213605	Vendor Advisory
https://support.apple.com/en-us/HT213606	Vendor Advisory
https://support.apple.com/en-us/HT213605	Vendor Advisory
https://support.apple.com/en-us/HT213606	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:apple:ipados::::::::
	cpe:2.3:o:apple:iphone_os::::::::
	cpe:2.3:o:apple:macos::::::::

History

11 Mar 2025, 17:15

Type	Values Removed	Values Added
CWE		CWE-787

21 Nov 2024, 07:46

Type	Values Removed	Values Added
References	~~() https://support.apple.com/en-us/HT213605 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213605 - Vendor Advisory
References	~~() https://support.apple.com/en-us/HT213606 - Vendor Advisory~~	() https://support.apple.com/en-us/HT213606 - Vendor Advisory

23 Mar 2023, 17:03

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~9.9~~	v2 : unknown v3 : 8.6

Information

Published : 2023-02-27 20:15

Updated : 2025-03-11 17:15

NVD link : CVE-2023-23531

Mitre link : CVE-2023-23531

CVE.ORG link : CVE-2023-23531

JSON object : View

Products Affected

apple

ipados
iphone_os
macos

CWE

NVD-CWE-noinfo CWE-787

Out-of-bounds Write

{"id": "CVE-2023-23531", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "published": "2023-02-27T20:15:14.843", "references": [{"url": "https://support.apple.com/en-us/HT213605", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT213606", "tags": ["Vendor Advisory"], "source": "product-security@apple.com"}, {"url": "https://support.apple.com/en-us/HT213605", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/en-us/HT213606", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges."}], "lastModified": "2025-03-11T17:15:47.627", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4FAC57E1-C456-4770-815E-DDD7A3621DEB", "versionEndExcluding": "16.3"}, {"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3710A47F-64BC-443A-8E80-F8116A01BD5B", "versionEndExcluding": "16.3"}, {"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "362E766C-05AD-4205-85FA-F388DDF5DD1A", "versionEndExcluding": "13.2"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}