CVE-2023-40307 — Privileges Memory Corruption (Out-of-bound write)

CVE-2023-40307

Privileges Memory Corruption (Out-of-bound write) PUBLISHED

Description (CNA)

An attacker with standard privileges on macOS when requesting administrator privileges from the application can submit input which causes a buffer overflow resulting in a crash of the application. This could make the application unavailable and allow reading or modification of data.

Affected (CNA)

Vendor / product	Versions
SAP SE / SAP Privileges	unaffected 1.5.4

CWE

CWE-787

References

https://github.com/SAP/macOS-enterprise-privileges/security/advisories/GHSA-rgq4-wxpj-5jv9

ADP enrichment

CVE

No English description supplied.

https://github.com/SAP/macOS-enterprise-privileges/security/advisories/GHSA-rgq4-wxpj-5jv9

CISA-ADP

No English description supplied.

No references supplied.