CVE-2023-32428

This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain root privileges.

Affected

Apple · macOS · watchOS · iOS and iPadOS · tvOS

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.63% chance of exploitation in the next 30 days, 49th percentile

Published

2023-09-06

Updated

2025-02-13

Proof-of-concept exploits (1)

• gergelykalman/CVE-2023-32428-a-macOS-LPE-via-MallocStackLogging19★ · 2024-11-26

Security advisories

• https://support.apple.com/en-us/HT213757
• https://support.apple.com/en-us/HT213758
• https://support.apple.com/en-us/HT213761
• https://support.apple.com/en-us/HT213764
• https://support.apple.com/kb/HT213757
• https://support.apple.com/kb/HT213758
• https://support.apple.com/kb/HT213761
• https://support.apple.com/kb/HT213764

References

• CVE Record
• NVD entry

Related

• CVE-2023-32364
• CVE-2023-32407
• CVE-2023-32422
• CVE-2023-38571