OS X update for Apple Neural Engine (CVE-2023-34425)

OS X update for Apple Neural Engine (CVE-2023-34425)

Severity

10

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

07/28/2023

Created

07/28/2023

Added

07/28/2023

Modified

01/28/2025

Description

The issue was addressed with improved memory handling. This issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, iOS 15.7.8 and iPadOS 15.7.8, macOS Big Sur 11.7.9, iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges.

Solution(s)

• apple-osx-upgrade-11_7_9
• apple-osx-upgrade-12_6_8
• apple-osx-upgrade-13_5

References

• https://attackerkb.com/topics/cve-2023-34425
• CVE - 2023-34425
• https://support.apple.com/kb/HT213843
• https://support.apple.com/kb/HT213844
• https://support.apple.com/kb/HT213845