CVE-2023-40416: Buffer Overflow
Published Oct 25, 2023
·Updated
Automation. The issue was addressed with improved checks.
Credit
JZ, Adam M., an anonymous researcher, Linus Henze(Pinauten GmbH), inooo, Mickey Jin@@patch1t, Grzegorz Riegel, Talal Haj Bakry(Mysk Inc), Tommy Mysk@@mysk_co(Mysk Inc), Mingxuan Yang@@PPPF00L(360 Vulnerability Research Institute), happybabywu(360 Vulnerability Research Institute), Guang Gong(360 Vulnerability Research Institute), (360 Vulnerability Research Institute), Alex Renda, Bistrit Dahal, Cristian Dinca(Computer Science), Romania, Claire Houston, 이준성(Junsung Lee)(Cross Republic), Pedro Ribeiro@@pedrib1337(Agile Information Security), Vitor Pedreira@@0xvhp_(Agile Information Security), 이준성(Junsung Lee), Kacper Kwapisz@@KKKas_, Adis Alic, Yiğit Can YILMAZ@@yilmazcanyigit, Sam Lakmaker, Kirin@@Pwnrin(SecuRing), Wojciech Regula(SecuRing), (Computer Science), CVE-2023-42946, Ting Ding, James Mancz, Omar Shibli, Lorenzo Cavallaro, Harry Lewandowski, Abhay Kailasia@@abhay_kailasia(Lakshmi Narain College Of Technology Bhopal India), Csaba Fitzl@@theevilbit(Offensive Security), Michael (Biscuit) Thomas - @social.lol@@biscuit, Peter Nguyễn Vũ Hoàng@@peternguyen14(STAR Labs SG Pte), Tomi Tokics@@tomitokics(iTomsn0w), CVE-2023-42823, Zhipeng Huo@@R3dF09(Tencent Security Xuanwu Lab), Noah Roskin-Frazee, Pr
Affected Software
14 affected componentsFixes available
Apple macOS<14.1
14.1
macOS<12.7.1
12.7.1
macOS Ventura<13.6.1
13.6.1
Apple iOS and iPadOS<17.1
17.1
Apple iOS, iPadOS, and macOS<17.1
17.1
Apple iOS and iPadOS<16.7.2
16.7.2
Apple iOS, iPadOS, and macOS<16.7.2
16.7.2
Apple iOS, iPadOS, and macOS<16.7.2
Apple iOS, iPadOS, and macOS>=17.0<17.1
iPhone OS<16.7.2
iPhone OS>=17.0<17.1
macOS>=12.0.0<12.7.1
macOS>=13.0<13.6.1
macOS>=14.0<14.1
Event History
Oct 25, 2023
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
Affected Software
CVE Published
via MITRE·06:31 PM
Data Sourced
via MITRE·06:31 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-40416.
2
What is the title of the vulnerability?
The title of the vulnerability is ImageIO. The issue was addressed with improved memory handling.
3
How does the vulnerability affect image processing?
Processing an image may result in disclosure of process memory.
4
Which software versions are affected by this vulnerability?
The vulnerability affects macOS Sonoma 14.1, iOS 16.7.2, iPadOS 16.7.2, macOS Monterey 12.7.1, macOS Ventura 13.6.1, iOS 17.1, and iPadOS 17.1.
5
How was the vulnerability fixed?
The vulnerability was fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, and macOS Sonoma 14.1 with improved memory handling.