CVE-2023-42886

Published: Dec 12, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2. A user may be able to cause unexpected app termination or arbitrary code execution.

Affected (3)

Products: Apple: Macos

Apple

1 product

Macos

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Macos	From 12.0.0 to 12.7.2
Apple Macos	From 13.0 to 13.6.3
Apple Macos	From 14.0 to 14.2

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (15)

http://seclists.org/fulldisclosure/2023/Dec/10

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2023/Dec/11

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2023/Dec/9

Source: product-security@apple.com

Mailing List

https://support.apple.com/en-us/HT214036

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214037

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT214038

Source: product-security@apple.com

Release NotesVendor Advisory

http://seclists.org/fulldisclosure/2023/Dec/10