CVE-2023-32391

State: Published
Severity: Not scored
Published: Jun 23, 2023
Updated: Feb 13, 2025
Reserved: May 8, 2023

Description

The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, watchOS 9.5, iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4. A shortcut may be able to use sensitive data with certain actions without prompting the user.

Scores

The record has no CVSS score.

Weaknesses

CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
macOSApple	before 13.4Affected
watchOSApple	before 9.5Affected
iOS and iPadOSApple	before 15.7Affected
iOS and iPadOSApple	before 16.5Affected

References

https://support.apple.com/en-us/HT213758
https://support.apple.com/en-us/HT213764
https://support.apple.com/en-us/HT213765
https://support.apple.com/en-us/HT213757
https://support.apple.com/kb/HT213761

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.