First published: Mon Jan 22 2024(Updated: )
Apple Neural Engine. The issue was addressed with improved memory handling.
Credit: Ye Zhang Baidu SecurityClemens Lang fmyy @binary_fmyy TIANGONG Team of Legendsec at QIlime TIANGONG Team of Legendsec at QIKoh M. Nakagawa FFRI Security Incan anonymous researcher Noah Roskin-Frazee Pr Ian de Marcellus Mark Bowers Jubaer Alnazi @h33tjubaer Kirin @Pwnrin Zhongquan Li @Guluisacat Wangtaiyu Zhongfu infoJames Lee @Windowsrcer product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Monterey | <12.7.3 | 12.7.3 |
Apple macOS | <14.3 | 14.3 |
Apple macOS | <13.6.4 | 13.6.4 |
tvOS | <17.3 | 17.3 |
Apple iOS, iPadOS, and watchOS | >16.0<16.7.5 | |
Apple iOS, iPadOS, and watchOS | >17.0<17.3 | |
iOS | >16.0<16.7.5 | |
iOS | >17.0<17.3 | |
Apple iOS and macOS | >=12.0<12.7.3 | |
Apple iOS and macOS | >=13.0<13.6.4 | |
Apple iOS and macOS | >=14.0<14.3 | |
tvOS | <17.3 | |
Apple iOS, iPadOS, and watchOS | <10.3 | |
Apple iOS, iPadOS, and watchOS | <10.3 | 10.3 |
Apple iOS, iPadOS, and watchOS | <17.3 | 17.3 |
Apple iOS, iPadOS, and watchOS | <17.3 | 17.3 |
Apple iOS, iPadOS, and watchOS | <16.7.5 | 16.7.5 |
Apple iOS, iPadOS, and watchOS | <16.7.5 | 16.7.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
The severity of CVE-2024-23212 has not been officially assigned but it involves memory handling improvements by Apple.
To fix CVE-2024-23212, update to the latest versions of the affected Apple software, including iOS 17.3, iPadOS 17.3, watchOS 10.3, tvOS 17.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, and macOS Monterey 12.7.3.
CVE-2024-23212 affects a range of Apple products, including iOS, iPadOS, watchOS, tvOS, and various versions of macOS.
CVE-2024-23212 was publicly disclosed with updates included in watchOS 10.3, tvOS 17.3, iOS 17.3, iPadOS 17.3, and macOS versions 14.3, 13.6.4, and 12.7.3.
CVE-2024-23212 addresses issues related to improved memory handling within the Apple Neural Engine.