CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Oct 2, 2023

High

CISA KEV

CVE-2023-41064

Apple—iOS, iPadOS, and macOS

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.

Required Action

https://support.apple.com/en-us/HT213905, https://support.apple.com/en-us/HT213906; https://nvd.nist.gov/vuln/detail/CVE-2023-41064

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Sep 11, 2023
KEV Added: Sep 11, 2023
Due Date: Oct 2, 2023
Related Articles: 0

Vendor

Apple

iOS, iPadOS, and macOS