{"id":"CVE-2023-32434","kind":"vulnerability","aliases":["CVE-2023-32434"],"related":[],"title":"An integer overflow was addressed with improved input validation","description":"An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7, watchOS 8.8.1, iOS 16.5.1 and iPadOS 16.5.1, macOS Ventura 13.4.1. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.7.","summary":"An integer overflow in Apple's iOS, iPadOS, macOS and watchOS kernel lets an app run code with kernel privileges. CISA lists it as actively exploited.","severity":"high","cvss":7.8,"epss":null,"exploited":true,"exploited_at":"2023-06-23T00:00:00+00:00","products":[{"name":"Apple Multiple Products","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"apple ipados","fixed":["15.7.7"],"affected":"< 15.7.7","ecosystem":"vendor"},{"name":"apple ipados","fixed":["16.5.1"],"affected":">= 16.0, < 16.5.1","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["15.7.7"],"affected":"< 15.7.7","ecosystem":"vendor"},{"name":"apple iphone os","fixed":["16.5.1"],"affected":">= 16.0, < 16.5.1","ecosystem":"vendor"},{"name":"apple macos","fixed":["11.7.8"],"affected":">= 11.0, < 11.7.8","ecosystem":"vendor"},{"name":"apple macos","fixed":["12.6.7"],"affected":">= 12.0.0, < 12.6.7","ecosystem":"vendor"},{"name":"apple macos","fixed":["13.4.1"],"affected":">= 13.0, < 13.4.1","ecosystem":"vendor"},{"name":"apple watchos","fixed":["8.8.1"],"affected":"< 8.8.1","ecosystem":"vendor"},{"name":"apple watchos","fixed":["9.5.2"],"affected":">= 9.0, < 9.5.2","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["apple-devices","exploited","infrastructure","ios","ipados","macos","watchos"],"not_affected_if":["fully-patched-devices"],"how_to_check":null,"fix":"Apply the Apple updates per vendor instructions; the sources do not name the fixed versions.","status":"open","published_at":"2023-06-23T00:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:06:30+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:06:30Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Apple updates per vendor instructions; the sources do not name the fixed versions.","reach":"local","impact":"high","summary":"An integer overflow in Apple's iOS, iPadOS, macOS and watchOS kernel lets an app run code with kernel privileges. CISA lists it as actively exploited.","category":"infrastructure","who_cares":["ios","ipados","macos","watchos","apple-devices"],"confidence":0.6,"needs_auth":"no","worst_case":"A malicious app gains kernel privileges and full control of the device.","analyst_note":"Find the Apple security advisory for CVE-2023-32434 to list fixed OS versions and the exploitation details.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["fully-patched-devices"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000437,"input_tokens":2793,"output_tokens":315,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2023':11A,14A '-32434':12A,15A '11.7.8':93C '12.6.7':101C '13.4.1':111C '15.7':145C '15.7.7':95C,98C '16.5.1':105C,108C '8.8.1':103C '9.5.2':89C 'abl':116C 'activ':72B,136C 'address':5A,78C 'app':62B,113C 'appl':40B,52B,124C 'apple':16A,19A,21A,23A,26A,29A,31A,33A,35A,37A 'apple-devic':39B 'arbitrari':119C 'awar':126C 'big':91C 'cisa':68B 'code':64B,120C 'cve':10A,13A 'devic':41B 'execut':118C 'exploit':42B,73B,137C 'fix':86C 'improv':7A,80C 'infrastructur':43B 'input':8A,81C 'integ':2A,49B,75C 'io':44B,54B,94C,104C,141C,144C 'ipado':45B,55B,97C,107C 'ipados':20A,22A 'iphone':24A,27A 'issu':84C,132C 'kernel':59B,66B,122C 'let':60B 'list':69B 'maco':46B,56B,90C,99C,109C 'macos':30A,32A,34A 'may':114C,133C 'monterey':100C 'multiple':17A 'os':25A,28A 'overflow':3A,50B,76C 'privileg':67B,123C 'products':18A 'releas':142C 'report':129C 'run':63B 'sur':92C 'valid':9A,82C 'ventura':110C 'version':139C 'watcho':47B,58B,88C,102C 'watchos':36A,38A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2023-06-23T00:00:00+00:00","kev":{"dateAdded":"2023-06-23","dueDate":"2023-07-14","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2023-32434","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-32434","severity":null,"published_at":"2023-06-23T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T12:39:23+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-32434","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32434","severity":null,"published_at":"2023-06-23T18:15:13+00:00","modified_at":"2026-06-17T05:58:49+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}