CVE-2023-40391

The issue was addressed with improved memory handling. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, macOS Sonoma 14, Xcode 15. An app may be able to disclose kernel memory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
appleCNA
---
---
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
VendorProductVersion
applexcode
𝑥
< 15.0
appleipados
𝑥
< 17.0
appleiphone_os
𝑥
< 17.0
applemacos
𝑥
< 14.0
appletvos
𝑥
< 17.0
𝑥
= Vulnerable software versions
References
http://seclists.org/fulldisclosure/2023/Oct/10
http://seclists.org/fulldisclosure/2023/Oct/3
http://seclists.org/fulldisclosure/2023/Oct/7
http://seclists.org/fulldisclosure/2023/Oct/8
https://support.apple.com/en-us/HT213936
https://support.apple.com/en-us/HT213938
https://support.apple.com/en-us/HT213939
https://support.apple.com/en-us/HT213940
http://seclists.org/fulldisclosure/2023/Oct/10
http://seclists.org/fulldisclosure/2023/Oct/3
http://seclists.org/fulldisclosure/2023/Oct/7
http://seclists.org/fulldisclosure/2023/Oct/8
https://support.apple.com/en-us/HT213936
https://support.apple.com/en-us/HT213938
https://support.apple.com/en-us/HT213939
https://support.apple.com/en-us/HT213940