Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
Apple · iOS, iPadOS, and macOS
Date added (CISA)
2023-09-11
Remediation due
2023-10-02
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.