CVE-2024-23286

A buffer overflow issue was addressed with improved memory handling

Critical · published March 8, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
68.9
In the wild
Unconfirmed
What it is

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. Processing an image may lead to arbitrary code execution.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01236 · 68.9th percentile
Published
2024-03-08T01:36Z
EPSS history
Timeline
  • 08 MAR 01:36Z
    A buffer overflow issue was addressed with improved memory handling
    cvelistv5