CVE-2023-42852

Details

A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Sonoma 14.1, Safari 17.1, tvOS 17.1. Processing web content may lead to arbitrary code execution.

Affected Packages

macOS

macOS 14

Fixed in:

14.1

References

WEB

http://seclists.org/fulldisclosure/2023/Oct/19

WEB

http://seclists.org/fulldisclosure/2023/Oct/22

WEB

http://seclists.org/fulldisclosure/2023/Oct/23

WEB

http://seclists.org/fulldisclosure/2023/Oct/24

WEB

http://seclists.org/fulldisclosure/2023/Oct/25

WEB

http://seclists.org/fulldisclosure/2023/Oct/27

WEB

http://www.openwall.com/lists/oss-security/2023/11/15/1

WEB

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RPPMOWFYZODONTA3RLZOKSGNR4DELGG2/

WEB

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S3O7ITSBZDHLBM5OG22K6RZAHRRTGECM/

WEB

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTCZGQPRDAOPP6NK4CIDJKIPMBWD5J7K/

WEB

https://security.gentoo.org/glsa/202401-33

WEB

https://support.apple.com/en-us/HT213981

WEB

https://support.apple.com/en-us/HT213982

WEB

https://support.apple.com/en-us/HT213984

WEB

https://support.apple.com/en-us/HT213986

WEB

https://support.apple.com/en-us/HT213987

WEB

https://support.apple.com/en-us/HT213988

WEB

https://support.apple.com/kb/HT213984

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2023-42852

WEB

https://www.debian.org/security/2023/dsa-5557