Firetruck

CVE-2023-41064

KEV
Updated Nov 4, 2025 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= unspecified, < 16.6affected
iOS and iPadOSApple / iOS and iPadOS>= unspecified, < 15.7affected
macOSApple / macOS>= unspecified, < 12.6affected
macOSApple / macOS>= unspecified, < 11.7affected
macOSApple / macOS>= unspecified, < 13.5affected