CVE-2023-32434: Apple Multiple Products Integer Overflow Vulnerability
First published: Wed Jun 21 2023(Updated: )
Kernel. An integer overflow was addressed with improved input validation.
Credit: product-security@apple.com Georgy Kucherin @kucher1n Leonid Bezvershenko @bzvr_ Boris Larin @oct0xor Valentin Pashkov KasperskyGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov KasperskyGeorgy Kucherin @kucher1n Leonid Bezvershenko @bzvr_ Boris Larin @oct0xor Valentin Pashkov Kaspersky product-security@apple.com Georgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov KasperskyGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov KasperskyGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov KasperskyGeorgy Kucherin @kucher1n KasperskyLeonid Bezvershenko @bzvr_ KasperskyBoris Larin @oct0xor Kaspersky KasperskyValentin Pashkov Kaspersky product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPadOS | <15.7.7 | |
| Apple iPadOS | >=16.0<16.5.1 | |
| Apple iPhone OS | <15.7.7 | |
| Apple iPhone OS | >=16.0<16.5.1 | |
| Apple macOS | >=11.0<11.7.8 | |
| Apple macOS | >=12.0.0<12.6.7 | |
| Apple macOS | >=13.0<13.4.1 | |
| Apple watchOS | <8.8.1 | |
| Apple watchOS | >=9.0<9.5.2 | |
| Apple iOS | <16.5.1 | 16.5.1 |
| Apple iPadOS | <16.5.1 | 16.5.1 |
| Apple iOS | <15.8 | 15.8 |
| Apple iPadOS | <15.8 | 15.8 |
| Apple watchOS | <8.8.1 | 8.8.1 |
| Apple macOS Monterey | <12.6.7 | 12.6.7 |
| Apple watchOS | <9.5.2 | 9.5.2 |
| Apple Multiple Products | ||
| Apple macOS | <11.7.8 | 11.7.8 |
| Apple macOS | <13.4.1 | 13.4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT213808 (Advisory)
- https://support.apple.com/en-us/HT213809 (Advisory)
- https://support.apple.com/en-us/HT213810 (Advisory)
- https://support.apple.com/en-us/HT213811
- https://support.apple.com/en-us/HT213812 (Advisory)
- https://support.apple.com/en-us/HT213813 (Advisory)
- https://support.apple.com/en-us/HT213814 (Advisory)
- https://support.apple.com/kb/HT213814
- https://support.apple.com/kb/HT213813
- https://support.apple.com/en-us/HT213990 (Advisory)
- http://seclists.org/fulldisclosure/2023/Oct/20
- https://support.apple.com/kb/HT213990
- https://support.apple.com/en-us/HT213808,
- https://support.apple.com/en-us/HT213812,
- https://support.apple.com/en-us/HT213809,
- https://support.apple.com/en-us/HT213810,
- https://support.apple.com/en-us/HT213813,
- https://support.apple.com/en-us/HT213811,
- https://support.apple.com/en-us/HT213814;
- https://nvd.nist.gov/vuln/detail/CVE-2023-32434
Parent vulnerabilities
(Appears in the following advisories)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the severity of CVE-2023-32434?
The severity of CVE-2023-32434 is high with a CVSS score of 7.8.
Which products are affected by CVE-2023-32434?
The affected products include Apple Multiple Products, watchOS, macOS Big Sur, iOS, and iPadOS.
How can I fix CVE-2023-32434 on watchOS?
You can fix CVE-2023-32434 on watchOS by updating to version 9.5.2 or later.
How can I fix CVE-2023-32434 on macOS Big Sur?
You can fix CVE-2023-32434 on macOS Big Sur by updating to version 11.7.8 or later.
Where can I find more information about CVE-2023-32434?
You can find more information about CVE-2023-32434 on the Apple support website.
- zeroday/true
- agent/type
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/apple-support
- agent/title
- agent/severity
- agent/description
- source/Apple
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/weakness
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/author
- agent/last-modified-date
- agent/trending
- agent/event
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/apple
- canonical/apple ipados
- version/apple ipados/16.0
- canonical/apple iphone os
- version/apple iphone os/16.0
- canonical/apple macos
- version/apple macos/11.0
- version/apple macos/12.0.0
- version/apple macos/13.0
- canonical/apple watchos
- version/apple watchos/9.0
- canonical/apple ios
- canonical/apple macos monterey
- canonical/apple multiple products