Firetruck

CVE-2023-28206

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, and macOS IOSurfaceAccelerator contain an out-of-bounds write vulnerability that allows an app to execute code with kernel privileges.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= unspecified, < 15.7affected
iOS and iPadOSApple / iOS and iPadOS>= unspecified, < 16.4affected
macOSApple / macOS>= unspecified, < 11.7affected
macOSApple / macOS>= unspecified, < 12.6affected
macOSApple / macOS>= unspecified, < 13.3affected