CVE-2023-27950: Input Validation
First published: Mon Mar 27 2023(Updated: )
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory.
Credit: Mickey Jin @patch1t Mickey Jin @patch1t product-security@apple.com product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| <13.3 | 13.3 | |
| <15.7.4 | 15.7.4 | |
| <15.7.4 | 15.7.4 | |
| Apple macOS | >=13.0<13.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2023-23541
- CVE-2023-27961
- CVE-2023-23543
- CVE-2023-27936
- CVE-2023-23537
- CVE-2023-27956
- CVE-2023-32366
- CVE-2023-27928
- CVE-2023-27946
- CVE-2023-23535
- CVE-2023-28200
- CVE-2023-27941
- CVE-2023-27969
- CVE-2023-23536
- CVE-2023-28185
- CVE-2023-41075
- CVE-2023-27949
- CVE-2023-27950
- CVE-2023-28182
- CVE-2023-27963
- CVE-2023-27954
- CVE-2023-23529
- CVE-2023-28198
- CVE-2023-32358
- CVE-2023-28201
- CVE-2023-32436
- CVE-2023-27968
- CVE-2023-28209
- CVE-2023-28210
- CVE-2023-28211
- CVE-2023-28212
- CVE-2023-28213
- CVE-2023-28214
- CVE-2023-28215
- CVE-2023-32356
- CVE-2023-23532
- CVE-2023-23527
- CVE-2023-27931
- CVE-2023-28179
- CVE-2023-42830
- CVE-2023-27951
- CVE-2023-23534
- CVE-2023-27955
- CVE-2023-40398
- CVE-2023-28181
- CVE-2023-32426
- CVE-2022-43551
- CVE-2022-43552
- CVE-2023-27934
- CVE-2023-28180
- CVE-2023-27935
- CVE-2023-27953
- CVE-2023-27958
- CVE-2023-40433
- CVE-2023-28190
- CVE-2023-28195
- CVE-2023-27937
- CVE-2023-23526
- CVE-2023-27939
- CVE-2023-27947
- CVE-2023-27948
- CVE-2023-42862
- CVE-2023-42865
- CVE-2023-27929
- CVE-2023-27957
- CVE-2023-32378
- CVE-2023-28187
- CVE-2023-28199
- CVE-2023-23514
- CVE-2023-27933
- CVE-2023-27943
- CVE-2023-23525
- CVE-2023-40383
- CVE-2023-28189
- CVE-2023-28197
- CVE-2023-23538
- CVE-2023-27962
- CVE-2023-23523
- CVE-2023-27942
- CVE-2023-32362
- CVE-2023-27952
- CVE-2023-23533
- CVE-2023-28178
- CVE-2023-27966
- CVE-2023-23542
- CVE-2023-28192
- CVE-2023-28188
- CVE-2023-0049
- CVE-2023-0051
- CVE-2023-0054
- CVE-2023-0288
- CVE-2023-0433
- CVE-2023-0512
- CVE-2023-32370
- CVE-2023-32435
- CVE-2023-27932
- CVE-2014-1745
- CVE-2023-27944
Frequently Asked Questions
What is CVE-2023-27950?
CVE-2023-27950 is a vulnerability in Model I/O where an out-of-bounds read can occur due to insufficient input validation.
How does CVE-2023-27950 affect macOS Ventura?
CVE-2023-27950 affects macOS Ventura 13.0 up to, but excluding, version 13.3.
What is the severity level of CVE-2023-27950?
The severity level of CVE-2023-27950 is medium with a CVSS score of 5.5.
How can CVE-2023-27950 be fixed?
CVE-2023-27950 can be fixed by updating macOS Ventura to version 13.3 or later as recommended by Apple.
What is the impact of CVE-2023-27950?
The impact of CVE-2023-27950 is that processing an image may result in the disclosure of process memory.
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup-request
- agent/software-canonical-lookup
- agent/event
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple macos
- version/apple macos/13.0
- canonical/apple ios
- canonical/apple ipados
- canonical/apple macos ventura