CVE-2023-23531: High severity macOS Ventura vulnerability

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2023-23531.

Q: What is the severity of CVE-2023-23531?

The severity of CVE-2023-23531 is high with a severity value of 8.6.

Q: Which software versions are affected by CVE-2023-23531?

CVE-2023-23531 affects macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3.

Q: What is the fix for CVE-2023-23531?

The issue has been addressed with improved memory handling in macOS Ventura 13.2, iOS 16.3, and iPadOS 16.3.

Q: Where can I find more information about CVE-2023-23531?

You can find more information about CVE-2023-23531 on the Apple support page: [link](https://support.apple.com/en-us/HT213605)

Published Jan 23, 2023

Updated

Foundation. The issue was addressed with improved memory handling.

Other sources

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges.

Credit

Austin Emmitt@@alkalinesec, Senior Security Researcher at Trellix Advanced Research Center

Affected Software

6 affected componentsFixes available

macOS Ventura<13.2

13.2

Apple iOS and iPadOS<16.3

16.3

Apple iOS, iPadOS, and macOS<16.3

16.3

Apple iOS, iPadOS, and macOS<16.3

iPhone OS<16.3

macOS<13.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade macOS Ventura to a version that resolves this vulnerability.
Fixed in 13.2
Upgrade
Upgrade Apple iOS and iPadOS to a version that resolves this vulnerability.
Fixed in 16.3
Upgrade
Upgrade Apple iOS, iPadOS, and macOS to a version that resolves this vulnerability.
Fixed in 16.3
Upgrade
Upgrade macOS to a version that resolves this vulnerability.
Fixed in 13.2
Upgrade
Upgrade iOS to a version that resolves this vulnerability.
Fixed in 16.3
Upgrade
Upgrade iPadOS to a version that resolves this vulnerability.
Fixed in 16.3

Event History

Feb 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Apr 2, 2023

Exploit Published

via GitHub·01:03 AM

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-23531.

What is the severity of CVE-2023-23531?