CVE-2023-27937

Description

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur 11.7.5, macOS Monterey 12.6.4, tvOS 16.4, watchOS 9.4. Parsing a maliciously crafted plist may lead to an unexpected app termination or arbitrary code execution.

References

https://support.apple.com/en-us/HT213678

https://support.apple.com/en-us/HT213677

https://support.apple.com/en-us/HT213676

https://support.apple.com/en-us/HT213675

https://support.apple.com/en-us/HT213674

https://support.apple.com/en-us/HT213670

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3