CVE-2023-40436

CRITICAL | Platform: macOS | Changelog

CVE Details

Description

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or read kernel memory.

CVSS 3.1 Score

Metric	Value
Base Score	9.1 (CRITICAL)
Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H`

Weakness

CWE-125

References

Apple Security Advisory
NVD Entry
http://seclists.org/fulldisclosure/2023/Oct/3 (Mailing List, Third Party Advisory)
https://support.apple.com/en-us/HT213940 (Release Notes, Vendor Advisory)