CVE-2023-42848
Published Oct 25, 2023
·Updated
Automation. The issue was addressed with improved checks.
Credit
JZ, Linus Henze(Pinauten GmbH), Mickey Jin@@patch1t, Grzegorz Riegel, Talal Haj Bakry(Mysk Inc), Tommy Mysk@@mysk_co(Mysk Inc), Yiğit Can YILMAZ@@yilmazcanyigit, Kirin@@Pwnrin(SecuRing), Wojciech Regula(SecuRing), (Computer Science), Cristian Dinca(Computer Science), Romania, Bistrit Dahal, CVE-2023-42946, 이준성(Junsung Lee)(Cross Republic), 이준성(Junsung Lee), Pedro Ribeiro@@pedrib1337(Agile Information Security), Vitor Pedreira@@0xvhp_(Agile Information Security), Adam M., Csaba Fitzl@@theevilbit(Offensive Security), Michael (Biscuit) Thomas - @social.lol@@biscuit, CVE-2023-42823, Mingxuan Yang@@PPPF00L(360 Vulnerability Research Institute), (360 Vulnerability Research Institute), happybabywu(360 Vulnerability Research Institute), Guang Gong(360 Vulnerability Research Institute), an anonymous researcher, inooo, Alex Renda, Claire Houston, Kacper Kwapisz@@KKKas_, Adis Alic, Sam Lakmaker, Ting Ding, James Mancz, Omar Shibli, Lorenzo Cavallaro, Harry Lewandowski, Abhay Kailasia@@abhay_kailasia(Lakshmi Narain College Of Technology Bhopal India), Peter Nguyễn Vũ Hoàng@@peternguyen14(STAR Labs SG Pte), Tomi Tokics@@tomitokics(iTomsn0w), Zhipeng Huo@@R3dF09(Tencent Security Xuanwu Lab), Noah Roskin-Frazee, Pr
Affected Software
16 affected componentsFixes available
Apple macOS Sonoma<14.1
14.1
Apple tvOS<17.1
17.1
Apple WatchOS<10.1
10.1
Apple macOS Ventura<13.6.1
13.6.1
Apple Ipad Os<16.7.2
Apple Ipad Os>=17.0<17.1
Apple iPhone OS<16.7.2
Apple iPhone OS>=17.0<17.1
Apple macOS>=13.0<13.6.1
Apple macOS=14.0
Apple tvOS<17.1
Apple WatchOS<10.1
Apple iOS<17.1
17.1
Apple iPadOS<17.1
17.1
Apple iOS<16.7.2
16.7.2
Apple iPadOS<16.7.2
16.7.2
Event History
Oct 25, 2023
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
Affected Software
Updated
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Feb 21, 2024
CVE Published
via MITRE·06:42 AM
Data Sourced
via MITRE·06:42 AM
DescriptionWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-42848?
CVE-2023-42848 has been classified as a high severity vulnerability due to the potential for exploitation through malicious image processing.
2
How do I fix CVE-2023-42848?
To fix CVE-2023-42848, update your device to the latest versions of affected software, including macOS Sonoma 14.1, iOS 17.1, or watchOS 10.1.
3
What products are affected by CVE-2023-42848?
CVE-2023-42848 affects multiple Apple products including iOS, iPadOS, tvOS, macOS Ventura, macOS Sonoma, and watchOS.
4
What are the new versions released to address CVE-2023-42848?
The new versions released to address CVE-2023-42848 are iOS and iPadOS 17.1, macOS Sonoma 14.1, watchOS 10.1, and macOS Ventura 13.6.1.
5
Can CVE-2023-42848 affect older versions of Apple software?
Yes, CVE-2023-42848 can affect older versions prior to the security patches, specifically those that have not been updated to the fixed releases.