CVE-2023-38258

MediumCVSS 5.5

Published: 27/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

The issue was addressed with improved checks. Processing a 3D model may result in disclosure of process memory.

Risk Assessment

Disclosure of process memory may lead to leakage of sensitive data, posing a serious security threat to the system.

Recommendation

It is recommended to update to macOS Ventura 13.5 or macOS Monterey 12.6.8 to mitigate this vulnerability.

Other vulnerabilities in macOS Ventura, macOS Monterey

CVE-2023-38421Medium
The issue was addressed with improved checks. Processing a 3D model may result in disclosure of process memory.

Original NVD description (English source)

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS