github - ghsa-h887-7vmx-g264

ghsa-h887-7vmx-g264

Vulnerability from github

Published

2023-07-27 00:30

Modified

2024-04-04 06:22

Severity

8.6 (High) - CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Details

The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox.

Show details on source website

{
  "affected": [],
  "aliases": [
    "CVE-2023-32437"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-07-27T00:15:15Z",
    "severity": "HIGH"
  },
  "details": "The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox.",
  "id": "GHSA-h887-7vmx-g264",
  "modified": "2024-04-04T06:22:30Z",
  "published": "2023-07-27T00:30:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32437"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/en-us/HT213841"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT213757"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT213758"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT213761"
    },
    {
      "type": "WEB",
      "url": "https://support.apple.com/kb/HT213764"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

cve-2023-32437

Vulnerability from cvelistv5

Published

2023-07-26 23:55

Modified

2024-08-02 15:18

Severity

Summary

The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox.

References

URL	Tags
https://support.apple.com/en-us/HT213841
https://support.apple.com/kb/HT213757
https://support.apple.com/kb/HT213761
https://support.apple.com/kb/HT213764
https://support.apple.com/kb/HT213758

Impacted products

Vendor	Product
Apple	iOS and iPadOS

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:18:37.132Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/en-us/HT213841"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213757"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213761"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213764"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.apple.com/kb/HT213758"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "16.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improvements to the file handling protocol. This issue is fixed in iOS 16.6 and iPadOS 16.6. An app may be able to break out of its sandbox."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "An app may be able to break out of its sandbox",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-07-27T03:45:24.632Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/HT213841"
        },
        {
          "url": "https://support.apple.com/kb/HT213757"
        },
        {
          "url": "https://support.apple.com/kb/HT213761"
        },
        {
          "url": "https://support.apple.com/kb/HT213764"
        },
        {
          "url": "https://support.apple.com/kb/HT213758"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2023-32437",
    "datePublished": "2023-07-26T23:55:04.827Z",
    "dateReserved": "2023-05-08T22:31:41.835Z",
    "dateUpdated": "2024-08-02T15:18:37.132Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.