Use-After-Free Vulnerability in Apple's Software Products
CVE-2023-42970

8.8HIGH

Key Information:

Vendor
Apple
Status
iOS And iPad OS
Mac OS
Watch OS
TV OS
Vendor
CVE Published:
11 April 2025

Summary

A use-after-free vulnerability has been identified in Apple's software ecosystem that may allow processing specially crafted web content to lead to arbitrary code execution. This flaw highlights the importance of improved memory management. Apple has addressed this issue in multiple updates across its platforms including iOS 17, iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, and Safari 17. Users are advised to update their devices to the latest versions to mitigate potential risks.

Affected Version(s)

iOS and iPadOS < 17

macOS < 14

Safari < 17

References

https://support.apple.com/en-us/120949
https://support.apple.com/en-us/120950
https://support.apple.com/en-us/120948

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.