First published: Wed Oct 25 2023(Updated: )
Automation. The issue was addressed with improved checks.
Credit: Linus Henze Pinauten GmbH product-security@apple.com JZ Mickey Jin @patch1t Grzegorz Riegel Talal Haj Bakry Mysk IncTommy Mysk @mysk_co Mysk IncYiğit Can YILMAZ @yilmazcanyigit Kirin @Pwnrin SecuRingWojciech Regula SecuRing Computer ScienceCristian Dinca Computer ScienceRomania Bistrit Dahal CVE-2023-42946 이준성(Junsung Lee) Cross Republic이준성(Junsung Lee) Pedro Ribeiro @pedrib1337 Agile Information SecurityVitor Pedreira @0xvhp_ Agile Information SecurityAdam M. Csaba Fitzl @theevilbit Offensive SecurityMichael (Biscuit) Thomas - @social.lol @biscuit CVE-2023-42823 an anonymous researcher inooo Mingxuan Yang @PPPF00L 360 Vulnerability Research Institutehappybabywu 360 Vulnerability Research InstituteGuang Gong 360 Vulnerability Research Institute 360 Vulnerability Research InstituteAlex Renda Claire Houston Kacper Kwapisz @KKKas_ Adis Alic Sam Lakmaker Ting Ding James Mancz Omar Shibli Lorenzo Cavallaro Harry Lewandowski Abhay Kailasia @abhay_kailasia Lakshmi Narain College Of Technology Bhopal IndiaPeter Nguyễn Vũ Hoàng @peternguyen14 STAR Labs SG PteTomi Tokics @tomitokics iTomsn0wZhipeng Huo @R3dF09 Tencent Security Xuanwu LabNoah Roskin-Frazee Pr
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | <14.1 | 14.1 |
Apple iOS, iPadOS, and watchOS | <10.1 | 10.1 |
macOS | <12.7.1 | 12.7.1 |
macOS Ventura | <13.6.1 | 13.6.1 |
Apple iOS and iPadOS | <17.1 | 17.1 |
Apple iOS, iPadOS, and macOS | <17.1 | 17.1 |
Apple iOS and iPadOS | <16.7.2 | 16.7.2 |
Apple iOS, iPadOS, and macOS | <16.7.2 | 16.7.2 |
Apple iOS, iPadOS, and macOS | <16.7.2 | |
Apple iOS, iPadOS, and macOS | >=17.0<17.1 | |
iPhone OS | <16.7.2 | |
iPhone OS | >=17.0<17.1 | |
macOS | >=12.0.0<12.7.1 | |
macOS | >=13.0<13.6.1 | |
macOS | >=14.0<14.1 | |
Apple iOS, iPadOS, and watchOS | <10.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The vulnerability ID is CVE-2023-42849.
The title of the vulnerability is 'Kernel. The issue was addressed with improved memory handling.'
The affected software versions are macOS Sonoma 14.1, iOS 16.7.2, iPadOS 16.7.2, watchOS 10.1, macOS Monterey 12.7.1, and macOS Ventura 13.6.1.
The vulnerability was fixed with improved memory handling in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1.
Yes, you can find more information about the vulnerability in the following references: [Support Link 1](https://support.apple.com/en-us/HT213981), [Support Link 2](https://support.apple.com/en-us/HT213984), [Support Link 3](https://support.apple.com/en-us/HT213988).