CVE-2023-28185

An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. An app may be able to cause a denial-of-service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
VendorProductVersion
appleipados
15.0 ≤
𝑥
< 15.7.4
appleipados
16.0 ≤
𝑥
< 16.4
appleiphone_os
15.0 ≤
𝑥
< 15.7.4
appleiphone_os
16.0 ≤
𝑥
< 16.4
applemacos
11.0 ≤
𝑥
< 11.7.5
applemacos
12.0.0 ≤
𝑥
< 12.6.4
appletvos
𝑥
< 16.4
applewatchos
𝑥
< 9.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/en-us/HT213673
https://support.apple.com/en-us/HT213674
https://support.apple.com/en-us/HT213675
https://support.apple.com/en-us/HT213676
https://support.apple.com/en-us/HT213677
https://support.apple.com/en-us/HT213678
https://support.apple.com/en-us/HT213673
https://support.apple.com/en-us/HT213674
https://support.apple.com/en-us/HT213675
https://support.apple.com/en-us/HT213676
https://support.apple.com/en-us/HT213677
https://support.apple.com/en-us/HT213678