CVE-2023-42977 — Apple / iOS and iPadOS

CVE-2023-42977

Apple / iOS and iPadOS PUBLISHED

Description (CNA)

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.

Affected (CNA)

Vendor / product	Versions
Apple / iOS and iPadOS	affected unspecified before 17
Apple / macOS	affected unspecified before 14

CWE

No CWE identifiers supplied.

References

https://support.apple.com/en-us/120949
https://support.apple.com/en-us/120950

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.