CVE-2023-23541: Low severity Apple iOS and iPadOS vulnerability
Published Mar 27, 2023
·Updated
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4. An app may be able to access information about a user’s contacts
Other sources
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
— Apple
Credit
Csaba Fitzl@@theevilbit(Offensive Security), Adam M., Mohamed GHANNAM@@_simo36, Mohamed GHANNAM, Mohamed Ghannam@@_simo36, Mickey Jin@@patch1t, Rıza Sabuncu@@rizasabuncu, Yiğit Can YILMAZ@@yilmazcanyigit, Itay Iellin(General Motors Product Cyber Security), Etienne Charron(Renault), Khadim Dieng(Renault), JeongOhKyea, Jianjun Dai(360 Vulnerability Research Institute), Guang Gong(360 Vulnerability Research Institute), Tingting Yin(Tsinghua University), Ye Zhang@@VAR10CK(Baidu Security), an anonymous researcher, Jubaer Alnazi(TRS Group of Companies), ryuzaki, Meysam Firouzi@@R00tkitSMM(Mbition Mercedes), jzhu(Trend Micro Zero Day Initiative), Pan ZhenPeng@@Peterpan0927(STAR Labs SG Pte), Pan ZhenPeng(STAR Labs SG Pte), Zechao Cai@@Zech4o(Zhejiang University), Adam Doupé(ASU SEFCOM), sqrtpwn, Félix Poulin-Bélanger, David Pan Ogea, an anonymous researcher(Red Canary), Brandon Dalton@@partyD0lphin(Red Canary), Milan Tenk(F), (F), Arthur Valiev(F), Zweig(Kunlun Lab), Abhay Kailasia@@abhay_kailasia(Lakshmi Narain College Of Technology Bhopal), Zhuowei Zhang, developStorm, Anton Spivak, Jubaer Alnazi Jabin(TRS Group Of Companies), (Alibaba Group), Wenchao Li(Alibaba Group), Xiaolong Bai(Alibaba Group), Xin Huang@@11iaxH, Gertjan Franken(imec), KU Leuven, hazbinhotel(Trend Micro Zero Day Initiative), Hyeon Park@@tree_segment(Team ApplePIE), Georgy Kucherin@@kucher1n(Kaspersky), Leonid Bezvershenko@@bzvr_(Kaspersky), Boris Larin@@oct0xor(Kaspersky), (Kaspersky), Valentin Pashkov(Kaspersky), Anonymous(Trend Micro Zero Day Initiative), Dohyun Lee@@l33d0hyun(SSD Labs), crixer@@pwning_me(SSD Labs)
Affected Software
8 affected componentsFixes available
Apple iOS and iPadOS<16.4
16.4
Apple iOS, iPadOS, and macOS<16.4
16.4
Apple iOS and iPadOS<15.7.4
15.7.4
Apple iOS, iPadOS, and macOS<15.7.4
15.7.4
Apple iOS, iPadOS, and macOS<15.7.4
Apple iOS, iPadOS, and macOS>=16.0<16.4
iPhone OS<15.7.4
iPhone OS>=16.0<16.4
Event History
Mar 27, 2023
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
May 8, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
08:15 PM
Description
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-23541
- CVE-2023-27961
- CVE-2023-23543
- CVE-2023-27936
- CVE-2023-23537
- CVE-2023-27956
- CVE-2023-32366
- CVE-2023-27928
- CVE-2023-27946
- CVE-2023-23535
- CVE-2023-28200
- CVE-2023-27941
- CVE-2023-27969
- CVE-2023-23536
- CVE-2023-28185
- CVE-2023-41075
- CVE-2023-27949
- CVE-2023-27950
- CVE-2023-28182
- CVE-2023-27963
- CVE-2023-27954
- CVE-2023-23529
- CVE-2023-28198
- CVE-2023-32358
- CVE-2023-28201
- CVE-2023-42830
- CVE-2023-23540
- CVE-2023-27959
- CVE-2023-27970
- CVE-2023-23532
- CVE-2023-23527
- CVE-2023-27931
- CVE-2023-23494
- CVE-2023-27955
- CVE-2023-23528
- CVE-2023-28181
- CVE-2023-40398
- CVE-2023-28195
- CVE-2023-27937
- CVE-2023-23526
- CVE-2023-27929
- CVE-2023-42862
- CVE-2023-42865
- CVE-2023-28187
- CVE-2023-32424
- CVE-2023-27933
- CVE-2023-27943
- CVE-2023-23525
- CVE-2022-46724
- CVE-2023-23523
- CVE-2023-27942
- CVE-2023-28194
- CVE-2023-28178
- CVE-2023-28188
- CVE-2023-32370
- CVE-2022-46725
- CVE-2023-32435
- CVE-2023-27932
- CVE-2022-46705
- CVE-2014-1745
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-23541.
2
What is the severity of CVE-2023-23541?
The severity of CVE-2023-23541 is low.
3
How does CVE-2023-23541 affect iOS and iPadOS?
CVE-2023-23541 allows an app to access information about a user's contacts on iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16.4.
4
How can I fix CVE-2023-23541?
To fix CVE-2023-23541, update your device to iOS 15.7.4 or later, or iPadOS 15.7.4 or later.
5
Where can I find more information about CVE-2023-23541?
You can find more information about CVE-2023-23541 on the Apple support website.