SB2023012339 - Multiple vulnerabilities in Apple iOS 16 and iPadOS 16
Published: January 23, 2023 Updated: September 11, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 21 secuirty vulnerabilities.
1) Improper access control (CVE-ID: CVE-2023-23499)
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to improper access restrictions in AppleMobileFileIntegrity. A local application can gain access to sensitive user information.
2) Input validation error (CVE-ID: CVE-2023-23519)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in ImageIO. A remote attacker can trick the victim to open a specially crafted file and perform a denial of service (DoS) attack.
3) Out-of-bounds read (CVE-ID: CVE-2023-23500)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the OS kernel. A local application can trigger an out-of-bounds read error and read contents of memory on the system.
4) Out-of-bounds read (CVE-ID: CVE-2023-23502)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the OS kernel. A local application can trigger an out-of-bounds read error and read contents of memory on the system.
5) Buffer overflow (CVE-ID: CVE-2023-23504)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the OS kernel. A local application can trigger memory corruption and execute arbitrary code with kernel privileges.
6) Information disclosure (CVE-ID: CVE-2023-23498)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to an error in Mail Drafts implementation when forwarding emails. The quoted original message may be selected from the wrong email when forwarding an email from an Exchange account and lead to information disclosure.
7) Information disclosure (CVE-ID: CVE-2023-23503)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to a logic issue in Maps application. A local application can bypass Privacy preferences.
8) Input validation error (CVE-ID: CVE-2023-23512)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient handling of cache in Safari. A remote attacker can trick the victim into visiting a website and perform a denial of service (DoS) attack.
9) Information disclosure (CVE-ID: CVE-2023-23505)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to a privacy issue in Screen Time. A local application can gain unauthorized access to user's contact information.
10) Security features bypass (CVE-ID: CVE-2023-23511)
The vulnerability allows a local application to bypass implemented security restrictions.
The vulnerability exists due to an error within the Weather application. A local application can bypass Privacy preferences.
11) Buffer overflow (CVE-ID: CVE-2023-23496)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content in WebKit. A remote attacker can create a specially crafted website, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
12) Buffer overflow (CVE-ID: CVE-2023-23518)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
13) Buffer overflow (CVE-ID: CVE-2023-23517)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
14) Race condition (CVE-ID: CVE-2023-23520)
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to a race condition in Crash Reporter. A local application can exploit the race and read arbitrary files on the system with root privileges.
15) Buffer overflow (CVE-ID: CVE-2023-23530)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error in the Foundation component. A local application can trigger memory corruption and execute arbitrary code out of its sandbox or with certain elevated privileges.
16) Buffer overflow (CVE-ID: CVE-2023-23531)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error in the Foundation component. A local application can trigger memory corruption and execute arbitrary code out of its sandbox or with certain elevated privileges.
17) Improperly implemented security check for standard (CVE-ID: CVE-2022-0108)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to incorrect implementation in Navigation in Google Chrome. A remote attacker can create a specially crafted web page, trick the victim into visiting it and gain access to sensitive information.
18) Buffer overflow (CVE-ID: CVE-2023-32393)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content in WebKit. A remote attacker can trick the victim to open a specially crafted website, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
19) Security features bypass (CVE-ID: CVE-2023-28208)
The vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a logic error in the Messages component. A local user can send a text from a secondary eSIM despite configuring a contact to use a primary eSIM.
20) Improper access control (CVE-ID: CVE-2023-32438)
The vulnerability allows a local application to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in AppleMobileFileIntegrity. A local application can bypass implemented security restrictions and gain unauthorized access to the application.
21) Buffer overflow (CVE-ID: CVE-2023-41990)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in FontParser. A remote attacker can trick the victim to open a specially crafted file or visit a malicious website, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install update from vendor's website.