CVE-2023-40449: Buffer Overflow
Published Oct 25, 2023
·Updated
Automation. The issue was addressed with improved checks.
Credit
Tomi Tokics@@tomitokics(iTomsn0w), CVE-2023-42823, Adam M., JZ, an anonymous researcher, Linus Henze(Pinauten GmbH), inooo, Mickey Jin@@patch1t, Grzegorz Riegel, Talal Haj Bakry(Mysk Inc), Tommy Mysk@@mysk_co(Mysk Inc), Mingxuan Yang@@PPPF00L(360 Vulnerability Research Institute), happybabywu(360 Vulnerability Research Institute), Guang Gong(360 Vulnerability Research Institute), (360 Vulnerability Research Institute), Alex Renda, Bistrit Dahal, Cristian Dinca(Computer Science), Romania, Claire Houston, 이준성(Junsung Lee)(Cross Republic), Pedro Ribeiro@@pedrib1337(Agile Information Security), Vitor Pedreira@@0xvhp_(Agile Information Security), 이준성(Junsung Lee), Kacper Kwapisz@@KKKas_, Zhipeng Huo@@R3dF09(Tencent Security Xuanwu Lab), Wojciech Regula(SecuRing), Csaba Fitzl@@theevilbit(Offensive Security), Noah Roskin-Frazee, Pr, Peter Nguyễn Vũ Hoàng@@peternguyen14(STAR Labs SG Pte), Michael (Biscuit) Thomas - @social.lol@@biscuit, Adis Alic, Yiğit Can YILMAZ@@yilmazcanyigit, Sam Lakmaker, Kirin@@Pwnrin(SecuRing), (Computer Science), CVE-2023-42946, Ting Ding, James Mancz, Omar Shibli, Lorenzo Cavallaro, Harry Lewandowski, Abhay Kailasia@@abhay_kailasia(Lakshmi Narain College Of Technology Bhopal India)
Affected Software
14 affected componentsFixes available
Apple macOS<14.1
14.1
macOS<12.7.1
12.7.1
macOS Ventura<13.6.1
13.6.1
Apple iOS and iPadOS<17.1
17.1
Apple iOS, iPadOS, and macOS<17.1
17.1
Apple iOS and iPadOS<16.7.2
16.7.2
Apple iOS, iPadOS, and macOS<16.7.2
16.7.2
Apple iOS, iPadOS, and macOS<16.7.2
Apple iOS, iPadOS, and macOS>=17.0<17.1
iPhone OS<16.7.2
iPhone OS>=17.0<17.1
macOS>=12.0.0<12.7.1
macOS>=13.0<13.6.1
macOS>=14.0<14.1
Event History
Oct 25, 2023
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·06:32 PM
Data Sourced
via MITRE·06:32 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2023-40449.
2
What is the severity of CVE-2023-40449?
The severity of CVE-2023-40449 is not provided in the information.
3
How can this vulnerability be exploited?
An app may be able to cause a denial-of-service.
4
Which software versions are affected by CVE-2023-40449?
The affected software versions are macOS Sonoma 14.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Monterey 12.7.1, and macOS Ventura 13.6.1.
5
How can I fix CVE-2023-40449?
The vulnerability is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, macOS Sonoma 14.1, and macOS Ventura 13.6.1.