CVE-2017-2423

Critical

Published: 02/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in certain Apple products affecting iOS before 10.3 and macOS before 10.12.4. The issue involves the 'Security' component and allows remote attackers to bypass intended access restrictions.

Risk Assessment

Attackers can exploit this vulnerability to gain unauthorized access to systems, potentially leading to serious data security breaches.

Recommendation

It is recommended to update systems to the latest versions to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with an empty signature.