VDB
GHSA-hp7g-968m-74c4
GHSA-hp7g-968m-74c4
PUBLISHED
CVSS 6.5 MEDIUM
Record from GitHub Advisory Database · Published October 25, 2023
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, macOS Ventura 13.6.1, macOS Sonoma 14.1. Processing an image may result in disclosure of process memory.
Risk scores
CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Timeline
- Oct 25, 2023 CVE Published
- Apr 10, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-hp7g-968m-74c4
vulnetix vdb fixes GHSA-hp7g-968m-74c4Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-hp7g-968m-74c4/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/en-us/HT213983 url
- https://support.apple.com/en-us/HT213984 url
- https://support.apple.com/kb/HT213984 url
- http://seclists.org/fulldisclosure/2023/Oct/19 url
- http://seclists.org/fulldisclosure/2023/Oct/26 url
- https://nvd.nist.gov/vuln/detail/CVE-2023-40416 advisory
- https://support.apple.com/en-us/HT213981 url
- https://support.apple.com/en-us/HT213982 url
- https://support.apple.com/en-us/HT213985 url
- https://support.apple.com/kb/HT213981 url
- https://support.apple.com/kb/HT213982 url
- https://support.apple.com/kb/HT213983 url
- https://support.apple.com/kb/HT213985 url
- http://seclists.org/fulldisclosure/2023/Oct/21 url
- http://seclists.org/fulldisclosure/2023/Oct/23 url
- http://seclists.org/fulldisclosure/2023/Oct/24 url