A high-severity vulnerability, CVE-2023-41064, has been identified in various versions of Apple's iOS, iPad OS, and macOS systems. This buffer overflow issue, which was addressed with improved memory handling, could lead to arbitrary code execution when processing a maliciously crafted image. Apple is aware of a report that this issue may have been actively exploited. Users with affected devices are advised to update their systems to the latest available versions to mitigate the risk.

How do I know if I'm affected?

If you're using an Apple device, you might be affected by this vulnerability. The affected versions include iOS up to 15.7.9 and 16.0 to 16.6.1, iPad OS up to 15.7.9 and 16.0 to 16.6.1, and macOS 11.0 to 11.7.10, up to 12.6.9, and 13.0 to 13.5.2. Devices at risk include iPhone 6s and later, iPad Pro all models, iPad Air 2 and later, iPad 5th generation and later, iPad mini 4th generation and later, and iPod touch 7th generation. To check if you're affected, verify your device model and software version, and consider updating to the latest version if necessary.

What should I do if I'm affected?

If you're affected by the CVE-2023-41064 vulnerability, it's crucial to update your device to the latest available version. For iOS and iPad OS, go to Settings > General > Software Update, and for macOS, open System Preferences > Software Update. Follow the on-screen instructions to download and install the update, ensuring your device is secure against this vulnerability.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, the CVE-2023-41064 vulnerability is in CISA's Known Exploited Vulnerabilities Catalog. The vulnerability, named Apple iOS, iPad OS, and macOS Image IO Buffer Overflow Vulnerability, was added on September 11, 2023, with a due date of October 2, 2023. The required action is to apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. In simpler terms, this security issue affects how certain Apple devices process images, and users should update their devices to protect against potential attacks.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-120 is a buffer overflow issue that occurs when processing maliciously crafted images, potentially leading to arbitrary code execution. It affects various Apple devices and has been addressed in recent updates.

For more details

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the resources listed below.

• Openwall discussion on CVE-2023-4863

• Apple Support: Security content of iOS 16.6.1 and iPadOS 16.6.1

• Apple Support: Security content of macOS Ventura 13.5.2

• Apple Support: Security content of iOS 15.7.9 and iPadOS 15.7.9