Vulnerability-Lookup

CNVD-2023-68417

Vulnerability from cnvd - Published: 2023-09-10

Title

Apple多款产品任意代码执行漏洞

Description

iOS是由苹果公司开发的移动操作系统。iPadOS是苹果公司基于iOS研发的移动端操作系统系列。macOS Ventura是Apple旗下桌面操作系统。 Apple多款产品存在任意代码执行漏洞，攻击者可利用漏洞从iMessage帐户发送恶意图像给目标用户，在不与受害者进行任何交互的情况下执行任意代码。

Severity

高

Patch Name

Apple多款产品任意代码执行漏洞的补丁

Patch Description

iOS是由苹果公司开发的移动操作系统。iPadOS是苹果公司基于iOS研发的移动端操作系统系列。macOS Ventura是Apple旗下桌面操作系统。 Apple多款产品存在任意代码执行漏洞，攻击者可利用漏洞从iMessage帐户发送恶意图像给目标用户，在不与受害者进行任何交互的情况下执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了更新版本修复漏洞，建议受影响用户升级至将相关Apple产品升级至iOS 16.6.1、iPadOS 16.6.1、macOS Ventura 13.5.2。新版本可在系统更新推送中找到，请及时关注更新： https://www.apple.com.cn/

Impacted products

Name
['Apple iOS <16.6.1', 'Apple iPadOS <16.6.1', 'Apple macOS Ventura <13.5.2']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-41064"
    }
  },
  "description": "iOS\u662f\u7531\u82f9\u679c\u516c\u53f8\u5f00\u53d1\u7684\u79fb\u52a8\u64cd\u4f5c\u7cfb\u7edf\u3002iPadOS\u662f\u82f9\u679c\u516c\u53f8\u57fa\u4e8eiOS\u7814\u53d1\u7684\u79fb\u52a8\u7aef\u64cd\u4f5c\u7cfb\u7edf\u7cfb\u5217\u3002macOS Ventura\u662fApple\u65d7\u4e0b\u684c\u9762\u64cd\u4f5c\u7cfb\u7edf\u3002\n\nApple\u591a\u6b3e\u4ea7\u54c1\u5b58\u5728\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u4eceiMessage\u5e10\u6237\u53d1\u9001\u6076\n\u610f\u56fe\u50cf\u7ed9\u76ee\u6807\u7528\u6237\uff0c\u5728\u4e0d\u4e0e\u53d7\u5bb3\u8005\u8fdb\u884c\u4efb\u4f55\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u66f4\u65b0\u7248\u672c\u4fee\u590d\u6f0f\u6d1e\uff0c\u5efa\u8bae\u53d7\u5f71\u54cd\u7528\u6237\u5347\u7ea7\u81f3\u5c06\u76f8\u5173Apple\u4ea7\u54c1\u5347\u7ea7\u81f3iOS 16.6.1\u3001iPadOS 16.6.1\u3001macOS Ventura 13.5.2\u3002\u65b0\u7248\u672c\u53ef\u5728\u7cfb\u7edf\u66f4\u65b0\u63a8\u9001\u4e2d\u627e\u5230\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.apple.com.cn/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2023-68417",
  "openTime": "2023-09-10",
  "patchDescription": "iOS\u662f\u7531\u82f9\u679c\u516c\u53f8\u5f00\u53d1\u7684\u79fb\u52a8\u64cd\u4f5c\u7cfb\u7edf\u3002iPadOS\u662f\u82f9\u679c\u516c\u53f8\u57fa\u4e8eiOS\u7814\u53d1\u7684\u79fb\u52a8\u7aef\u64cd\u4f5c\u7cfb\u7edf\u7cfb\u5217\u3002macOS Ventura\u662fApple\u65d7\u4e0b\u684c\u9762\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nApple\u591a\u6b3e\u4ea7\u54c1\u5b58\u5728\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u4eceiMessage\u5e10\u6237\u53d1\u9001\u6076\r\n\u610f\u56fe\u50cf\u7ed9\u76ee\u6807\u7528\u6237\uff0c\u5728\u4e0d\u4e0e\u53d7\u5bb3\u8005\u8fdb\u884c\u4efb\u4f55\u4ea4\u4e92\u7684\u60c5\u51b5\u4e0b\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apple\u591a\u6b3e\u4ea7\u54c1\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Apple iOS \u003c16.6.1",
      "Apple iPadOS \u003c16.6.1",
      "Apple macOS Ventura \u003c13.5.2"
    ]
  },
  "serverity": "\u9ad8",
  "submitTime": "2023-09-09",
  "title": "Apple\u591a\u6b3e\u4ea7\u54c1\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2023-41064 (GCVE-0-2023-41064)

Vulnerability from cvelistv5 – Published: 2023-09-07 17:30 – Updated: 2025-11-04 22:04

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: active Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2023-11-15 16:35 UTC

CWE

Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Assigner

apple mitre root

References

9 references

URL	Tags
https://support.apple.com/en-us/HT213914
https://support.apple.com/en-us/HT213915
https://support.apple.com/en-us/HT213905
https://support.apple.com/en-us/HT213913
https://support.apple.com/en-us/HT213906
http://www.openwall.com/lists/oss-security/2023/09/21/4
https://support.apple.com/kb/HT213915
https://support.apple.com/kb/HT213913
https://www.cisa.gov/known-exploited-vulnerabilit…	government-resource

Impacted products

5 products

Vendor	Product	Version
Apple	macOS	Affected: unspecified , < 12.6 (custom)
Apple	macOS	Affected: unspecified , < 11.7 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 16.6 (custom)
Apple	iOS and iPadOS	Affected: unspecified , < 15.7 (custom)
Apple	macOS	Affected: unspecified , < 13.5 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T22:04:57.736Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213914"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213915"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213905"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213913"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213906"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2023/09/21/4"
          },
          {
            "url": "https://support.apple.com/kb/HT213915"
          },
          {
            "url": "https://support.apple.com/kb/HT213913"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-41064",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2023-11-15T16:35:59.212810Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2023-09-11",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41064"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:05:39.223Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41064"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2023-09-11T00:00:00.000Z",
            "value": "CVE-2023-41064 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "12.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "13.5",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-21T18:25:08.006Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213914"
        },
        {
          "url": "https://support.apple.com/en-us/HT213915"
        },
        {
          "url": "https://support.apple.com/en-us/HT213905"
        },
        {
          "url": "https://support.apple.com/en-us/HT213913"
        },
        {
          "url": "https://support.apple.com/en-us/HT213906"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2023/09/21/4"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-41064",
    "datePublished": "2023-09-07T17:30:10.904Z",
    "dateReserved": "2023-08-22T18:10:00.330Z",
    "dateUpdated": "2025-11-04T22:04:57.736Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2023-68417

CVE-2023-41064 (GCVE-0-2023-41064)

Tags

Sightings

Nomenclature

Related by attack behaviour