CVE-2023-28198
Apple Safari DFG Fixup Phase Use-After-Free Information Disclosure Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.
Se ha solucionado un problema de use-after-free con una mejora en la gestión de memoria. Este problema se ha solucionado en iOS 16.4 y iPadOS 16.4, macOS Ventura 13.3. El procesamiento de contenido web puede dar lugar a la ejecución de código arbitrario.
A vulnerability was found in WebKit. When processing web content, it may lead to arbitrary code execution.
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the DFG fixup phase. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-03-13 CVE Reserved
- 2023-08-04 CVE Published
- 2024-08-02 CVE Updated
- 2024-09-15 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2023/09/11/1 | Mailing List |
|
| https://security.gentoo.org/glsa/202401-04 |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.apple.com/en-us/HT213670 | 2024-01-05 | |
| https://support.apple.com/en-us/HT213676 | 2024-01-05 | |
| https://access.redhat.com/security/cve/CVE-2023-28198 | 2023-11-14 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2238943 | 2023-11-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Apple Search vendor "Apple" | Ipados Search vendor "Apple" for product "Ipados" | < 16.4 Search vendor "Apple" for product "Ipados" and version " < 16.4" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Iphone Os Search vendor "Apple" for product "Iphone Os" | < 16.4 Search vendor "Apple" for product "Iphone Os" and version " < 16.4" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Macos Search vendor "Apple" for product "Macos" | >= 13.0 < 13.3 Search vendor "Apple" for product "Macos" and version " >= 13.0 < 13.3" | - |
Affected
| ||||||
| Webkitgtk Search vendor "Webkitgtk" | Webkitgtk Search vendor "Webkitgtk" for product "Webkitgtk" | < 2.40.1 Search vendor "Webkitgtk" for product "Webkitgtk" and version " < 2.40.1" | - |
Affected
| ||||||
| Wpewebkit Search vendor "Wpewebkit" | Wpe Webkit Search vendor "Wpewebkit" for product "Wpe Webkit" | < 2.40.1 Search vendor "Wpewebkit" for product "Wpe Webkit" and version " < 2.40.1" | - |
Affected
| ||||||