First published: Mon Mar 27 2023(Updated: )
AMD. A buffer overflow issue was addressed with improved memory handling.
Credit: product-security@apple.com product-security@apple.com Mickey Jin @patch1t ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. Mohamed Ghannam @_simo36 Mickey Jin @patch1t Mickey Jin @patch1t Mickey Jin @patch1t Adam M. Brandon Dalton @partyD0lphin Red CanaryChan Shue Long Offensive Security Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityRıza Sabuncu @rizasabuncu Yiğit Can YILMAZ @yilmazcanyigit Mickey Jin @patch1t JeongOhKyea Tingting Yin Tsinghua UniversityMickey Jin @patch1t Tingting Yin Tsinghua UniversityJunoh Lee at Theori CVE-2022-43551 CVE-2022-43552 Aleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosMikko Kenttälä ) @Turmio_ SensorFuJoshua Jones Adam M. Adam M. Ye Zhang @VAR10CK Baidu SecurityYe Zhang @VAR10CK Baidu Securityan anonymous researcher Jubaer Alnazi TRS Group of CompaniesCsaba Fitzl @theevilbit Offensive Securityjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition Mercedesryuzaki Meysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMickey Jin @patch1t Yiğit Can YILMAZ @yilmazcanyigit Murray Mike Pan ZhenPeng @Peterpan0927 STAR Labs SG PteArsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) Félix Poulin-Bélanger David Pan Ogea Xinru Chi Pangu LabNed Williamson Google Project ZeroAdam Doupé ASU SEFCOMsqrtpwn Arsenii Kostromin (0x3c3e) an anonymous researcher Red CanaryBrandon Dalton @partyD0lphin Red CanaryMilan Tenk F FArthur Valiev FMickey Jin @patch1t Mickey Jin @patch1t Zweig Kunlun LabMickey Jin @patch1t Joshua Jones Mickey Jin @patch1t Mickey Jin @patch1t Zhuowei Zhang Mickey Jin @patch1t Mickey Jin @patch1t developStorm Mickey Jin @patch1t Khiem Tran Csaba Fitzl @theevilbit Offensive SecurityMickey Jin @patch1t FFRI Security IncKoh M. Nakagawa FFRI Security Inc Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Masahiro Kawada @kawakatz GMO Cybersecurity by IeraeJubaer Alnazi Jabin TRS Group Of Companies Alibaba GroupWenchao Li Alibaba GroupXiaolong Bai Alibaba GroupAdam M. Guilherme Rambo Best Buddy AppsMickey Jin @patch1t Xin Huang @11iaxH CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 Gertjan Franken imecKU Leuven hazbinhotel Trend Micro Zero Day InitiativeGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov Kasperskyan anonymous researcher an anonymous researcher an anonymous researcher Anonymous Trend Micro Zero Day InitiativeDohyun Lee @l33d0hyun SSD Labscrixer @pwning_me SSD LabsMickey Jin @patch1t Mickey Jin @patch1t Mickey Jin @patch1t Mickey Jin @patch1t Adam M. Brandon Dalton @partyD0lphin Red CanaryChan Shue Long Offensive Security Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityRıza Sabuncu @rizasabuncu Yiğit Can YILMAZ @yilmazcanyigit Mickey Jin @patch1t JeongOhKyea Tingting Yin Tsinghua UniversityMickey Jin @patch1t Tingting Yin Tsinghua UniversityJunoh Lee at Theori CVE-2022-43551 CVE-2022-43552 Aleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosMikko Kenttälä ) @Turmio_ SensorFuJoshua Jones Adam M. Adam M. Ye Zhang @VAR10CK Baidu SecurityYe Zhang @VAR10CK Baidu Securityan anonymous researcher Jubaer Alnazi TRS Group of CompaniesCsaba Fitzl @theevilbit Offensive Securityjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition Mercedesryuzaki Meysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMickey Jin @patch1t Yiğit Can YILMAZ @yilmazcanyigit Murray Mike Pan ZhenPeng @Peterpan0927 STAR Labs SG PteArsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) Félix Poulin-Bélanger David Pan Ogea Xinru Chi Pangu LabNed Williamson Google Project ZeroAdam Doupé ASU SEFCOMsqrtpwn Arsenii Kostromin (0x3c3e) an anonymous researcher Red CanaryBrandon Dalton @partyD0lphin Red CanaryMilan Tenk F FArthur Valiev FMickey Jin @patch1t Mickey Jin @patch1t Zweig Kunlun LabMickey Jin @patch1t Joshua Jones Mickey Jin @patch1t Mickey Jin @patch1t Zhuowei Zhang Mickey Jin @patch1t Mickey Jin @patch1t developStorm Mickey Jin @patch1t Khiem Tran Csaba Fitzl @theevilbit Offensive SecurityMickey Jin @patch1t FFRI Security IncKoh M. Nakagawa FFRI Security Inc Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Masahiro Kawada @kawakatz GMO Cybersecurity by IeraeJubaer Alnazi Jabin TRS Group Of Companies Alibaba GroupWenchao Li Alibaba GroupXiaolong Bai Alibaba GroupAdam M. Guilherme Rambo Best Buddy AppsMickey Jin @patch1t Xin Huang @11iaxH CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 Gertjan Franken imecKU Leuven hazbinhotel Trend Micro Zero Day InitiativeGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov Kasperskyan anonymous researcher an anonymous researcher an anonymous researcher Anonymous Trend Micro Zero Day InitiativeDohyun Lee @l33d0hyun SSD Labscrixer @pwning_me SSD LabsMickey Jin @patch1t Mohamed Ghannam @_simo36 Mickey Jin @patch1t Mickey Jin @patch1t Mickey Jin @patch1t Adam M. Brandon Dalton @partyD0lphin Red CanaryChan Shue Long Offensive Security Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityRıza Sabuncu @rizasabuncu Yiğit Can YILMAZ @yilmazcanyigit Mickey Jin @patch1t JeongOhKyea Tingting Yin Tsinghua UniversityMickey Jin @patch1t Tingting Yin Tsinghua UniversityJunoh Lee at Theori CVE-2022-43551 CVE-2022-43552 Aleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosMikko Kenttälä ) @Turmio_ SensorFuJoshua Jones Adam M. Adam M. Ye Zhang @VAR10CK Baidu SecurityYe Zhang @VAR10CK Baidu Securityan anonymous researcher Jubaer Alnazi TRS Group of CompaniesCsaba Fitzl @theevilbit Offensive Securityjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition Mercedesryuzaki Meysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMickey Jin @patch1t Yiğit Can YILMAZ @yilmazcanyigit Murray Mike Pan ZhenPeng @Peterpan0927 STAR Labs SG PteArsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) Félix Poulin-Bélanger David Pan Ogea Xinru Chi Pangu LabNed Williamson Google Project ZeroAdam Doupé ASU SEFCOMsqrtpwn Arsenii Kostromin (0x3c3e) an anonymous researcher Red CanaryBrandon Dalton @partyD0lphin Red CanaryMilan Tenk F FArthur Valiev FMickey Jin @patch1t Mickey Jin @patch1t Zweig Kunlun LabMickey Jin @patch1t Joshua Jones Mickey Jin @patch1t Mickey Jin @patch1t Zhuowei Zhang Mickey Jin @patch1t Mickey Jin @patch1t developStorm Mickey Jin @patch1t Khiem Tran Csaba Fitzl @theevilbit Offensive SecurityMickey Jin @patch1t FFRI Security IncKoh M. Nakagawa FFRI Security Inc Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Masahiro Kawada @kawakatz GMO Cybersecurity by IeraeJubaer Alnazi Jabin TRS Group Of Companies Alibaba GroupWenchao Li Alibaba GroupXiaolong Bai Alibaba GroupAdam M. Guilherme Rambo Best Buddy AppsMickey Jin @patch1t Xin Huang @11iaxH CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 Gertjan Franken imecKU Leuven hazbinhotel Trend Micro Zero Day InitiativeGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov Kasperskyan anonymous researcher an anonymous researcher an anonymous researcher Anonymous Trend Micro Zero Day InitiativeDohyun Lee @l33d0hyun SSD Labscrixer @pwning_me SSD LabsMickey Jin @patch1t Mickey Jin @patch1t Adam M. Brandon Dalton @partyD0lphin Red CanaryChan Shue Long Offensive Security Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityRıza Sabuncu @rizasabuncu Yiğit Can YILMAZ @yilmazcanyigit Mickey Jin @patch1t JeongOhKyea Tingting Yin Tsinghua UniversityMickey Jin @patch1t Tingting Yin Tsinghua UniversityJunoh Lee at Theori CVE-2022-43551 CVE-2022-43552 Aleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosMikko Kenttälä ) @Turmio_ SensorFuJoshua Jones Adam M. Adam M. Ye Zhang @VAR10CK Baidu SecurityYe Zhang @VAR10CK Baidu Securityan anonymous researcher Jubaer Alnazi TRS Group of CompaniesCsaba Fitzl @theevilbit Offensive Securityjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition Mercedesryuzaki Meysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMickey Jin @patch1t Yiğit Can YILMAZ @yilmazcanyigit Murray Mike Pan ZhenPeng @Peterpan0927 STAR Labs SG PteArsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) Félix Poulin-Bélanger David Pan Ogea Xinru Chi Pangu LabNed Williamson Google Project ZeroAdam Doupé ASU SEFCOMsqrtpwn Arsenii Kostromin (0x3c3e) an anonymous researcher Red CanaryBrandon Dalton @partyD0lphin Red CanaryMilan Tenk F FArthur Valiev FMickey Jin @patch1t Mickey Jin @patch1t Zweig Kunlun LabMickey Jin @patch1t Joshua Jones Mickey Jin @patch1t Mickey Jin @patch1t Zhuowei Zhang Mickey Jin @patch1t Mickey Jin @patch1t developStorm Mickey Jin @patch1t Khiem Tran Csaba Fitzl @theevilbit Offensive SecurityMickey Jin @patch1t FFRI Security IncKoh M. Nakagawa FFRI Security Inc Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Masahiro Kawada @kawakatz GMO Cybersecurity by IeraeJubaer Alnazi Jabin TRS Group Of Companies Alibaba GroupWenchao Li Alibaba GroupXiaolong Bai Alibaba GroupAdam M. Guilherme Rambo Best Buddy AppsMickey Jin @patch1t Xin Huang @11iaxH CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 Gertjan Franken imecKU Leuven hazbinhotel Trend Micro Zero Day InitiativeGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov Kasperskyan anonymous researcher an anonymous researcher an anonymous researcher Anonymous Trend Micro Zero Day InitiativeDohyun Lee @l33d0hyun SSD Labscrixer @pwning_me SSD LabsMickey Jin @patch1t ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. ABC Research s.r.o. Mohamed Ghannam @_simo36 Mickey Jin @patch1t Mickey Jin @patch1t Mickey Jin @patch1t Adam M. Brandon Dalton @partyD0lphin Red CanaryChan Shue Long Offensive Security Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityRıza Sabuncu @rizasabuncu Yiğit Can YILMAZ @yilmazcanyigit Mickey Jin @patch1t JeongOhKyea Tingting Yin Tsinghua UniversityMickey Jin @patch1t Tingting Yin Tsinghua UniversityJunoh Lee at Theori CVE-2022-43551 CVE-2022-43552 Aleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosAleksandar Nikolic Cisco TalosMikko Kenttälä ) @Turmio_ SensorFuJoshua Jones Adam M. Adam M. Ye Zhang @VAR10CK Baidu SecurityYe Zhang @VAR10CK Baidu Securityan anonymous researcher Jubaer Alnazi TRS Group of CompaniesCsaba Fitzl @theevilbit Offensive Securityjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition MercedesMeysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMeysam Firouzi @R00tkitSMM Mbition Mercedesryuzaki Meysam Firouzi @R00tkitSMM Mbition Mercedesjzhu Trend Micro Zero Day InitiativeMickey Jin @patch1t Yiğit Can YILMAZ @yilmazcanyigit Murray Mike Pan ZhenPeng @Peterpan0927 STAR Labs SG PteArsenii Kostromin (0x3c3e) Arsenii Kostromin (0x3c3e) Félix Poulin-Bélanger David Pan Ogea Xinru Chi Pangu LabNed Williamson Google Project ZeroAdam Doupé ASU SEFCOMsqrtpwn Arsenii Kostromin (0x3c3e) an anonymous researcher Red CanaryBrandon Dalton @partyD0lphin Red CanaryMilan Tenk F FArthur Valiev FMickey Jin @patch1t Mickey Jin @patch1t Zweig Kunlun LabMickey Jin @patch1t Joshua Jones Mickey Jin @patch1t Mickey Jin @patch1t Zhuowei Zhang Mickey Jin @patch1t Mickey Jin @patch1t developStorm Mickey Jin @patch1t Khiem Tran Csaba Fitzl @theevilbit Offensive SecurityMickey Jin @patch1t FFRI Security IncKoh M. Nakagawa FFRI Security Inc Offensive SecurityCsaba Fitzl @theevilbit Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Masahiro Kawada @kawakatz GMO Cybersecurity by IeraeJubaer Alnazi Jabin TRS Group Of Companies Alibaba GroupWenchao Li Alibaba GroupXiaolong Bai Alibaba GroupAdam M. Guilherme Rambo Best Buddy AppsMickey Jin @patch1t Xin Huang @11iaxH CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 Gertjan Franken imecKU Leuven hazbinhotel Trend Micro Zero Day InitiativeGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov Kasperskyan anonymous researcher an anonymous researcher an anonymous researcher Anonymous Trend Micro Zero Day InitiativeDohyun Lee @l33d0hyun SSD Labscrixer @pwning_me SSD LabsMickey Jin @patch1t Mickey Jin @patch1t Xin Huang @11iaxH CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 Gertjan Franken imecKU Leuven hazbinhotel Trend Micro Zero Day InitiativeGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov Kasperskyan anonymous researcher an anonymous researcher an anonymous researcher Anonymous Trend Micro Zero Day InitiativeDohyun Lee @l33d0hyun SSD Labscrixer @pwning_me SSD LabsMickey Jin @patch1t
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | >=13.0<13.3 | |
Apple macOS | <13.3 | 13.3 |
<13.3 | 13.3 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-28179 is a vulnerability in AppleScript that could result in unexpected app termination or disclosure of process memory.
CVE-2023-28179 has a severity rating of high (7.1).
CVE-2023-28179 affects macOS Ventura versions up to and including 13.3.
To fix CVE-2023-28179 on macOS Ventura, update to version 13.3 or higher.
You can find more information about CVE-2023-28179 at the following reference: [support.apple.com/en-us/HT213670](https://support.apple.com/en-us/HT213670)