Main
Vulnerability Database
Exploits
ID:10283 - Exploit for Out-of-bounds write in Apple iOS and iPadOS - CVE-2023-28206
ID:10283 - Exploit for Out-of-bounds write in Apple iOS and iPadOS - CVE-2023-28206
Published: August 2, 2024
Vulnerability identifier: #VU74605
Vulnerability risk: High
CVE-ID: CVE-2023-28206
CWE-ID: CWE-787
Exploitation vector: Local access
Vulnerable software:
Apple iOS
iPadOS
Apple iOS
iPadOS
Link to public exploit:
Vulnerability description
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error in IOSurfaceAccelerator. A local application can trigger an out-of-bounds write and execute arbitrary code with kernel privileges.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install updates from vendor's website.