An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/HT213676 | Vendor Advisory |
| https://support.apple.com/en-us/HT213676 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Dec 2024, 14:26
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple ipados
|
|
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
21 Nov 2024, 07:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.apple.com/en-us/HT213676 - Vendor Advisory |
27 Jul 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to execute arbitrary code with kernel privileges. |
15 May 2023, 13:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
|
| First Time |
Apple iphone Os
Apple ipad Os Apple |
|
| References | (MISC) https://support.apple.com/en-us/HT213676 - Vendor Advisory | |
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
08 May 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-08 20:15
Updated : 2025-01-29 16:15
NVD link : CVE-2023-27970
Mitre link : CVE-2023-27970
CVE.ORG link : CVE-2023-27970
JSON object : View
Products Affected
apple
- ipados
- iphone_os
CWE
CWE-787
Out-of-bounds Write