CVE-2023-40394 — Apple / iOS and iPadOS

CVE-2023-40394

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

The issue was addressed with improved validation of environment variables. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to access sensitive user data.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected unspecified before 16.6

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/HT213841

ADP enrichment

CVE

No English description supplied.

https://support.apple.com/en-us/HT213841

CISA-ADP

No English description supplied.

No references supplied.