First published: Mon Dec 11 2023(Updated: )
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
Credit: Zhenjiang Zhao Pangu TeamQianxin Junsung Lee Meysam Firouzi @R00tkitSMM product-security@apple.com Noah Roskin-Frazee Pr Kirin @Pwnrin Mickey Jin @patch1t an anonymous researcher Marc Newlin SkySafeChristopher Reynolds Aymane Chabat Wojciech Regula SecuRingMichael DePlante @izobashi Trend Micro Zero Day InitiativePan ZhenPeng @Peterpan0927 STAR Labs SG PteEloi Benoist-Vanderbeken @elvanderb SynacktivCVE-2023-42893 ARJUN S D Csaba Fitzl @theevilbit OffSecAndrew Goldberg The McCombs School of BusinessThe University Texas at AustinZhongquan Li @Guluisacat Dawn Security Lab of JingDongCsaba Fitzl @theevilbit Offensive SecurityJoshua Jewett @JoshJewett33 Pwn2car Zoom Offensive Security Team Nan Wang @eternalsakura13 360 Vulnerability Research Instituterushikesh nandedkar SungKwon Lee (Demon.Team) Ivan Fratric Google Project Zero Trend Micro Zero Day InitiativeKoh M. Nakagawa @tsunek0h CVE-2023-38545 CVE-2023-38039 CVE-2023-38546 Yann GASCUEL Alter SolutionsAnthony Cruz Tyrant Corp @App CVE-2023-3618 CVE-2020-19185 CVE-2020-19186 CVE-2020-19187 CVE-2020-19188 CVE-2020-19189 CVE-2020-19190 Ron Masas BreakPointArsenii Kostromin (0x3c3e) Mattie Behrens Zhongquan Li @Guluisacat CVE-2023-5344 Don Clarke Clément Lecigne Google's Threat Analysis GroupJewel Lambert Yiğit Can YILMAZ @yilmazcanyigit Offensive Security Offensive SecurityYiğit Can YILMAZ @yilmazcanyigit Zhipeng Huo @R3dF09 Tencent Security Xuanwu Labrushikesh nandedka
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | <14.2 | 14.2 |
tvOS | <17.2 | 17.2 |
Apple iOS, iPadOS, and watchOS | <10.2 | 10.2 |
macOS | <12.7.2 | 12.7.2 |
macOS Ventura | <13.6.3 | 13.6.3 |
Apple iOS and iPadOS | <17.2 | 17.2 |
Apple iOS, iPadOS, and macOS | <17.2 | 17.2 |
Apple iOS and iPadOS | <16.7.3 | 16.7.3 |
Apple iOS, iPadOS, and macOS | <16.7.3 | 16.7.3 |
Apple iOS, iPadOS, and macOS | <16.7.3 | |
Apple iOS, iPadOS, and macOS | >=17.0<17.2 | |
iPhone OS | <16.7.3 | |
iPhone OS | >=17.0<17.2 | |
macOS | >=12.0.0<12.7.2 | |
macOS | >=13.0<13.6.3 | |
macOS | >=14.0<14.2 | |
tvOS | <10.2 | |
Apple iOS, iPadOS, and watchOS | <10.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2023-42899 has been classified as a moderate severity vulnerability due to the potential impact of memory handling issues.
To fix CVE-2023-42899, update to the latest version of the affected software: macOS Sonoma 14.2, iOS 17.2, iPadOS 17.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2, watchOS 10.2, or tvOS 17.2.
CVE-2023-42899 affects Apple iOS, iPadOS, macOS Monterey, macOS Ventura, macOS Sonoma, watchOS, and tvOS versions prior to the specified updates.
The disclosure date for CVE-2023-42899 has not been specified but is related to the release of security updates in late 2023.
CVE-2023-42899 can lead to potential memory handling vulnerabilities that may allow attackers to exploit the system and compromise user data.