GHSA-xwfx-q77c-v4gg

GHSA-xwfx-q77c-v4gg PUBLISHED CVSS 7.099999904632568 HIGH

Record from GitHub Advisory Database · Published September 27, 2023

The issue was addressed with improved bounds checks. This issue is fixed in macOS Ventura 13.6, tvOS 17, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to overwrite arbitrary files.

Risk scores

CVSS 3.1

7.099999904632568

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Timeline

Sep 27, 2023 CVE Published
May 1, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-xwfx-q77c-v4gg
vulnetix vdb fixes GHSA-xwfx-q77c-v4gg

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-xwfx-q77c-v4gg/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2023-40452 advisory
http://seclists.org/fulldisclosure/2023/Oct/10 url
http://seclists.org/fulldisclosure/2023/Oct/9 url
http://seclists.org/fulldisclosure/2023/Oct/3 url
http://seclists.org/fulldisclosure/2023/Oct/5 url
http://seclists.org/fulldisclosure/2023/Oct/6 url
http://seclists.org/fulldisclosure/2023/Oct/8 url
https://support.apple.com/en-us/HT213931 advisory
https://support.apple.com/en-us/HT213932 advisory
https://support.apple.com/en-us/HT213936 advisory
https://support.apple.com/kb/HT213931 advisory
https://support.apple.com/kb/HT213936 advisory
https://support.apple.com/kb/HT213938 advisory
https://support.apple.com/en-us/HT213937 advisory
https://support.apple.com/en-us/HT213938 advisory
https://support.apple.com/en-us/HT213940 advisory
https://support.apple.com/kb/HT213932 advisory
https://support.apple.com/kb/HT213937 advisory
https://support.apple.com/kb/HT213940 advisory

Look up in the Resolve Platform →