SWSandworm Watch
cve entity

CVE-2023-41064

2 source-linked records in the current knowledge graph.

high

CVE-2023-41064: Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2023-41061CVE-2023-41064EPSS 15.3%AppleiOS, iPadOS, and macOS
CISA KEV ↗ · unattributed attribution
high

CVE-2023-41061: Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2023-41061CVE-2023-41064EPSS 15.3%AppleiOS, iPadOS, and watchOS
CISA KEV ↗ · unattributed attribution