First published: Mon Dec 11 2023(Updated: )
AppleGraphicsControl. Multiple memory corruption issues were addressed with improved input validation.
Credit: Ivan Fratric Google Project ZeroIvan Fratric Google Project Zero Trend Micro Zero Day InitiativeMichael DePlante @izobashi Trend Micro Zero Day InitiativeIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project ZeroIvan Fratric Google Project Zero product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS | >=14.0<14.2 | |
Apple macOS | <14.2 | 14.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2023-42906 is considered a high severity vulnerability due to its potential to cause memory corruption and unexpected app termination.
To fix CVE-2023-42906, update your macOS to version 14.2 or later.
CVE-2023-42906 affects Apple macOS versions from 14.0 up to, but not including, 14.2.
The potential consequences of CVE-2023-42906 include application crashes and possible exploitation by processing a maliciously crafted file.
CVE-2023-42906 was publicly disclosed in December 2023.