Impact: Processing a maliciously crafted image may result in disclosure of process memoryĭescription: The issue was addressed with improved memory handling.ĬVE-2023-27956: Ye Zhang of Baidu SecurityĬVE-2023-27928: Csaba Fitzl of Offensive Security

Impact: An app may be able to read sensitive location information

Impact: An app may be able to cause unexpected system termination or write kernel memoryĭescription: An out-of-bounds write issue was addressed with improved input validation.ĬVE-2023-27936: Tingting Yin of Tsinghua University Impact: A sandboxed app may be able to determine which app is currently using the cameraĭescription: The issue was addressed with additional restrictions on the observability of app states.ĬVE-2023-23543: Yiğit Can YILMAZ for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation) Impact: Importing a maliciously crafted calendar invitation may exfiltrate user informationĭescription: Multiple validation issues were addressed with improved input sanitization.ĬVE-2023-27961: Rıza Sabuncu for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation) Impact: An app may be able to access information about a user’s contactsĭescription: A privacy issue was addressed with improved private data redaction for log entries.ĬVE-2023-23541: Csaba Fitzl of Offensive Security Available for: iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st generation), iPad Air 2, iPad mini (4th generation), and iPod touch (7th generation)

Apple latest update