CVE-2023-41064
KEVApple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
View CVE record →- Vendor / Project
- Apple
- Product
- iOS, iPadOS, and macOS
- Date added
- Sep 11, 2023
- Due date
- Oct 2, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-120
Description
Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.