CVE-2023-38136

HighCVSS 7.8

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system and potential takeover of the device.

Recommendation

It is recommended to update to iOS 16.6, iPadOS 16.6, or watchOS 9.6 to mitigate this vulnerability.

Other vulnerabilities in iOS, iPadOS, watchOS

CVE-2020-9819MediumActively exploited
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption.

Original NVD description (English source)

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, watchOS 9.6. An app may be able to execute arbitrary code with kernel privileges.