CVE-2023-42926

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

M

ultiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

References

Link	Resource
http://packetstormsecurity.com/files/176535/macOS-AppleGVA-Memory-Handling.html	Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2023/Dec/9	Mailing List Third Party Advisory
https://support.apple.com/en-us/HT214036	Release Notes Vendor Advisory
http://packetstormsecurity.com/files/176535/macOS-AppleGVA-Memory-Handling.html	Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2023/Dec/9	Mailing List Third Party Advisory
https://support.apple.com/en-us/HT214036	Release Notes Vendor Advisory
https://support.apple.com/kb/HT214036

Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

04 Nov 2025, 20:17

Type	Values Removed	Values Added
References		() https://support.apple.com/kb/HT214036 -

21 Nov 2024, 08:23

Type	Values Removed	Values Added
References	~~() http://packetstormsecurity.com/files/176535/macOS-AppleGVA-Memory-Handling.html - Third Party Advisory, VDB Entry~~	() http://packetstormsecurity.com/files/176535/macOS-AppleGVA-Memory-Handling.html - Third Party Advisory, VDB Entry
References	~~() http://seclists.org/fulldisclosure/2023/Dec/9 - Mailing List, Third Party Advisory~~	() http://seclists.org/fulldisclosure/2023/Dec/9 - Mailing List, Third Party Advisory
References	~~() https://support.apple.com/en-us/HT214036 - Release Notes, Vendor Advisory~~	() https://support.apple.com/en-us/HT214036 - Release Notes, Vendor Advisory

Information

Published : 2023-12-12 01:15

Updated : 2025-11-04 20:17

NVD link : CVE-2023-42926

Mitre link : CVE-2023-42926

CVE.ORG link : CVE-2023-42926

JSON object : View

Products Affected

macos

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2023-42926", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2023-12-12T01:15:12.683", "references": [{"url": "http://packetstormsecurity.com/files/176535/macOS-AppleGVA-Memory-Handling.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "[email protected]"}, {"url": "http://seclists.org/fulldisclosure/2023/Dec/9", "tags": ["Mailing List", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://support.apple.com/en-us/HT214036", "tags": ["Release Notes", "Vendor Advisory"], "source": "[email protected]"}, {"url": "http://packetstormsecurity.com/files/176535/macOS-AppleGVA-Memory-Handling.html", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2023/Dec/9", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/en-us/HT214036", "tags": ["Release Notes", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://support.apple.com/kb/HT214036", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution."}, {"lang": "es", "value": "Se abordaron m\u00faltiples problemas de corrupci\u00f3n de memoria con una validaci\u00f3n de entrada mejorada. Este problema se solucion\u00f3 en macOS Sonoma 14.2. El procesamiento de un archivo creado con fines malintencionados puede provocar la finalizaci\u00f3n inesperada de la aplicaci\u00f3n o la ejecuci\u00f3n de c\u00f3digo arbitrario."}], "lastModified": "2025-11-04T20:17:03.190", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6892DEBD-024E-414B-9282-DCCCF23A3BDD", "versionEndExcluding": "14.2", "versionStartIncluding": "14.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}