Apple iOS/macOS October 2023 Security Update Vulnerability List (CVE-2023-43346 etc.)

Critical Vulnerability Information Audio Impact: Processing maliciously crafted files may lead to unexpected application termination or memory corruption. Description: Fixed out-of-bounds access issue via improved boundary checks. CVE: CVE-2023-43346 (Hiroshi Ito) CoreAudio Impact: Processing maliciously crafted video may lead to unexpected application termination. Description: Fixed out-of-bounds issue via improved input validation. CVE: CVE-2023-43349 (Orionly, in collaboration with Trend Micro Zero Day Initiative) IOHIDFamily Impact: May lead to unauthorized disclosure of system information. Description: Fixed buffer overflow issue via improved boundary checks. CVE: CVE-2023-43302 (Kostya Kozlov) Kernel Impact: A UDP server socket bound to a local interface may bind to all interfaces. Description: Fixed logical issue via improved state management. CVE: CVE-2023-43359 (Viktor Oleynikin) LaunchServices Impact: Applications may monitor keyboard input without user permission. Description: Fixed via improved checks. CVE: CVE-2023-43362 (Philipp Boldt) Libc Impact: Applications may cause service interruption. Description: Fixed service interruption issue via improved validation. CVE: CVE-2023-43389 (Nathaniel Oh (@nalyasia)) CVE: CVE-2023-43360 (Nathaniel Oh (@nalyasia)) MobileStorageMounter Impact: Applications may cause service interruption. Description: Fixed type confusion issue via improved memory handling. CVE: CVE-2023-43555 (Swindle Team) Notes Impact: Attackers with physical access may view images in recently viewed notes after unlocking the device. Description: Fixed via improved cache handling. CVE: CVE-2023-43505 (Yuriy Bronovskiy) Shortcuts Impact: Shortcuts may bypass sandbox restrictions. Description: Fixed permission issue via additional sandbox restrictions. CVE: CVE-2023-43559 (정영민/김대엽) WebKit Impact: Websites may access sensor information without user consent. Description: Fixed via improved cache handling. CVE: CVE-2023-43366 (Joydeep Atria) CVE: CVE-2023-43367 (Joydeep Atria) Impact: Processing maliciously crafted web content may lead to unexpected process crashes. Description: Fixed correctness issue via improved checks. CVE: CVE-2023-43642 (Joydeep Atria) CVE: CVE-2023-43342 (Anonymous/Anonymous researcher)

Goal Reached Thanks to every supporter — we hit 100%!

Apple iOS/macOS October 2023 Security Update Vulnerability List (CVE-2023-43346 etc.)