CVE-2023-27937
Summary
| CVE | CVE-2023-27937 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-05-08 20:15:00 UTC |
| Updated | 2023-07-27 04:15:00 UTC |
| Description | An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution. |
Risk And Classification
Problem Types: CWE-190
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| About the security content of macOS Ventura 13.3 - Apple Support | MISC | support.apple.com | |
| About the security content of macOS Monterey 12.6.4 - Apple Support | MISC | support.apple.com | |
| About the security content of iOS 16.4 and iPadOS 16.4 - Apple Support | MISC | support.apple.com | |
| About the security content of watchOS 9.4 - Apple Support | MISC | support.apple.com | |
| About the security content of tvOS 16.4 - Apple Support | MISC | support.apple.com | |
| About the security content of macOS Big Sur 11.7.5 - Apple Support | MISC | support.apple.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.