EXPOSURES › CVE-2023-41064

CVE-2023-41064

HIGH ⌖ ON CISA KEV · EXPLOITED

DETAIL

SourceCISA-KEV · kev Published2023-09-11 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-41064 ↗

⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 65/100 rceexploited-in-wild

Maliciously crafted images triggered a buffer overflow vulnerability in Apple's ImageIO, potentially enabling code execution and being actively exploited in the wild.

▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED

apple · vendor iOS, iPadOS, and macOS · product

DESCRIPTION

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.