CVE-2023-41974 — Apple / iOS and iPadOS

Description (CNA)

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, iOS 15.8.7 and iPadOS 15.8.7. An app may be able to execute arbitrary code with kernel privileges.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected unspecified before 17
Apple / iOS and iPadOS	affected unspecified before 15.8.7

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/120949
https://support.apple.com/en-us/126632

ADP enrichment

CVE

No English description supplied.

https://support.apple.com/en-us/HT213938
https://support.apple.com/kb/HT213938

CISA-ADP

No English description supplied.

https://cloud.google.com/blog/topics/threat-intelligence/coruna-powerful-ios-exploit-kit
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-41974