CVE-2023-38590

HighCVSS 8.8

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.00%

58th percentile - higher than 58% of all known CVEs

Summary

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in several versions of Apple operating systems.

Risk Assessment

A remote user may be able to cause unexpected system termination or corrupt kernel memory, potentially leading to serious security issues.

Recommendation

It is recommended to update to the latest versions of the operating systems mentioned in the description to mitigate the risk associated with this vulnerability.

Other vulnerabilities in watchOS, macOS, iOS, iPadOS, tvOS

CVE-2023-36495Critical
An integer overflow was addressed with improved input validation. This issue is fixed in several versions of Apple operating systems.

Original NVD description (English source)

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, tvOS 16.6, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause unexpected system termination or corrupt kernel memory.