by Kastro
Paper/Archive/CVE-2023-40436

CVE-2023-40436

Apple macOS — The issue was addressed with improved bounds checks.

EPSS 1%CVSS 9.1
critical.is priorityof 100
41
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 70.4.704 × 2014.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or read kernel memory.

Affected

ProductAffectedFixed inSource
macOSunspecified – < 1414CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/HT213940refseclists.org/fulldisclosure/2023/Oct/3refsupport.apple.com/kb/HT213940