vulnerability

OS X update for Model I/O (CVE-2023-42856)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Oct 26, 2023

Added

Oct 26, 2023

Modified

Mar 27, 2026

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. Processing a file may lead to unexpected app termination or arbitrary code execution.

Solutions

apple-osx-upgrade-12_7_1apple-osx-upgrade-13_6_1apple-osx-upgrade-14_1

References

CVE-2023-42856
https://attackerkb.com/topics/CVE-2023-42856
CWE-119
EUVD-EUVD-2023-47277
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-47277
https://support.apple.com/kb/HT213983
https://support.apple.com/kb/HT213984
https://support.apple.com/kb/HT213985

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report