---
id: "CVE-2023-41064"
kind: "vulnerability"
aliases: ["CVE-2023-41064"]
title: "A buffer overflow issue was addressed with improved memory handling"
severity: "critical"
cvss: 7.8
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Apple iOS, iPadOS, and macOS", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["15.7.9"], "affected": "< 15.7.9", "ecosystem": "vendor"}, {"name": "apple ipados", "fixed": ["16.6.1"], "affected": ">= 16.0, < 16.6.1", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["15.7.9"], "affected": "< 15.7.9", "ecosystem": "vendor"}, {"name": "apple iphone os", "fixed": ["16.6.1"], "affected": ">= 16.0, < 16.6.1", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["11.7.10"], "affected": ">= 11.0, < 11.7.10", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["12.6.9"], "affected": ">= 12.0, < 12.6.9", "ecosystem": "vendor"}, {"name": "apple macos", "fixed": ["13.5.2"], "affected": ">= 13.0, < 13.5.2", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["apple-devices", "exploited", "ios", "ipados", "macos", "vendor"]
not_affected_if: ["fully-patched-devices"]
published_at: "2023-09-07T18:15:07+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41064", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-41064", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# A buffer overflow issue was addressed with improved memory handling

Apple's ImageIO framework, used by iOS, iPadOS and macOS to decode images, has a buffer overflow triggered by a crafted image. An attacker who gets a device to process that image can run code on it, and the flaw was exploited in the wild, chained with CVE-2023-41061.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Apple iOS, iPadOS, and macOS affected ? fixed ?
- vendor:apple ipados affected < 15.7.9 fixed 15.7.9
- vendor:apple ipados affected >= 16.0, < 16.6.1 fixed 16.6.1
- vendor:apple iphone os affected < 15.7.9 fixed 15.7.9
- vendor:apple iphone os affected >= 16.0, < 16.6.1 fixed 16.6.1
- vendor:apple macos affected >= 11.0, < 11.7.10 fixed 11.7.10
- vendor:apple macos affected >= 12.0, < 12.6.9 fixed 12.6.9
- vendor:apple macos affected >= 13.0, < 13.5.2 fixed 13.5.2

## Fix

Update iOS, iPadOS and macOS to a release that includes Apple's fix; the sources do not name the exact versions.
CISA directs federal agencies to apply vendor mitigations or discontinue use if none are available.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-41064
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-41064

## From the sources

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 and iPadOS 15.7.9, macOS Big Sur 11.7.10. Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_