CVE Catalog
CVE-2023-38421
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.31%
23th percentile - higher than 23% of all known CVEs
Summary
The issue was addressed with improved checks. Processing a 3D model may result in disclosure of process memory.
Risk Assessment
Disclosure of process memory may lead to leakage of sensitive data, posing a serious security threat to the system.
Recommendation
It is recommended to update to macOS Ventura 13.5 or macOS Monterey 12.6.8 to mitigate this vulnerability.
Original NVD description (English source)
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory.