CVE-2023-32434

Published Jun 23, 2023

Last updated a year ago

Apple

Mobile device

Overview

AI description

Automated description summarized from trusted sources.

CVE-2023-32434 is an integer overflow vulnerability residing in the Mach virtual memory layer of the XNU kernel, the kernel used in Apple's iOS, iPadOS, macOS, and watchOS operating systems. This flaw allows an application to execute arbitrary code with kernel privileges. It was patched in iOS 16.5.1, macOS 13.4.1, and corresponding versions of the other affected operating systems. This vulnerability was reportedly exploited as part of the "Operation Triangulation" spyware campaign, discovered when security researchers at Kaspersky were targeted. The exploit chain involved a WebKit bug, the kernel bug (CVE-2023-32434), a userspace PAC bypass, and a PPL bypass. This vulnerability affects devices running versions of iOS released before iOS 15.7, as well as macOS Big Sur 11.7.8, macOS Monterey 12.6.7, watchOS 8.8.1 and 9.5.2. Apple addressed the vulnerability with improved input validation. While the vulnerability has been patched, it highlights the importance of keeping devices updated to protect against potential exploits. The discovery and subsequent patching of this vulnerability underscore the ongoing efforts in cybersecurity to identify and mitigate threats, especially those actively exploited in the wild.

Description: An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.
Source: product-security@apple.com
NVD status: Analyzed
Products: ipados, iphone_os, macos, watchos

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Apple Multiple Products Integer Overflow Vulnerability
Exploit added on: Jun 23, 2023
Exploit action due: Jul 14, 2023
Required action: Apply updates per vendor instructions.

Weaknesses

nvd@nist.gov: CWE-190
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-190

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "E8FAA574-E1B0-4BB4-934A-7B9D7D4363B0",
            "versionEndExcluding": "15.7.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "C9696FA8-BED8-44C1-8F9F-70D7B61E861D",
            "versionEndExcluding": "16.5.1",
            "versionStartIncluding": "16.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B94C7DA5-DA67-4FFB-AB79-62CE457357D1",
            "versionEndExcluding": "15.7.7",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "264BAADE-3DE3-4698-B182-15802C36FB19",
            "versionEndExcluding": "16.5.1",
            "versionStartIncluding": "16.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "A6FCD0AD-BB08-44D1-9E14-24C4D940B760",
            "versionEndExcluding": "11.7.8",
            "versionStartIncluding": "11.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "969D98EE-69B3-4F88-8170-4FBBABFEEB15",
            "versionEndExcluding": "12.6.7",
            "versionStartIncluding": "12.0.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "3405331D-E4E6-4362-91C7-0F50DA398938",
            "versionEndExcluding": "13.4.1",
            "versionStartIncluding": "13.0",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "757EE36B-8601-4676-B3C8-5A58D5BBF611",
            "versionEndExcluding": "8.8.1",
            "vulnerable": true
          },
          {
            "criteria": "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "B8B4BDE3-1FAB-4716-AEDF-DC20E0A74B04",
            "versionEndExcluding": "9.5.2",
            "versionStartIncluding": "9.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.