CVE-2023-32434CISA KEV: Actively Exploited

Apple Multiple Products Integer Overflow Vulnerability

Published Jun 23, 2023·Updated Jun 23, 2023

Description

Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.

Public Exploits & PoCs2 found

PoC: Trigon

Deterministic kernel exploit based on CVE-2023-32434.

PoC: oob_entry

oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free