Overview
- Description
- A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3, Studio Display Firmware Update 16.4. An app may be able to execute arbitrary code with kernel privileges.
- Source
- product-security@apple.com
- NVD status
- Modified
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 7.8
- Impact score
- 5.9
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- nvd@nist.gov
- CWE-787
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6D636F7-278A-491B-8960-91A4D5A86A96",
"versionEndExcluding": "13.3",
"versionStartIncluding": "13.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:studio_display_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A07DFADF-533B-42F8-95A3-7CDDBE013363",
"versionEndExcluding": "16.4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:apple:studio_display:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "666850EE-510A-4E77-B72C-21CBB1F38DF8"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]