CVE-2023-27955

EUVD-2023-31681
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Monterey 12.6.4, tvOS 16.4, macOS Big Sur 11.7.5. An app may be able to read arbitrary files.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA-ADPADP
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
appleipados
𝑥
< 16.4
appleiphone_os
𝑥
< 16.4
applemacos
11.0 ≤
𝑥
< 11.7.5
applemacos
12.0 ≤
𝑥
< 12.6.4
applemacos
13.0 ≤
𝑥
< 13.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/en-us/HT213670
https://support.apple.com/en-us/HT213674
https://support.apple.com/en-us/HT213675
https://support.apple.com/en-us/HT213676
https://support.apple.com/en-us/HT213677
https://support.apple.com/en-us/HT213670
https://support.apple.com/en-us/HT213674
https://support.apple.com/en-us/HT213675
https://support.apple.com/en-us/HT213676
https://support.apple.com/en-us/HT213677