Main Vulnerability Database Vulnerabilities #VU77607

Integer overflow in Apple iOS and iPadOS - CVE-2023-32434

Published: June 21, 2023 / Updated: September 12, 2025

Vulnerability identifier: #VU77607

CSH Severity: High

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-32434

CWE-ID: CWE-190

Exploitation vector: Local access

Exploit availability: The vulnerability is being exploited in the wild

Vulnerability details

The vulnerability allows a local application to escalate privileges on the system.

The vulnerability exists due to an integer overflow within the OS kernel. A local application can trigger an integer overflow and execute arbitrary code with kernel privileges.

Note, the vulnerability is being actively exploited in the wild.

Affected software

Apple iOS
iPadOS
watchOS
macOS

How to mitigate CVE-2023-32434

Install updates from vendor's website.

Apple iOS - addressed in versions 15.7.7 19H357, 15.8 19H370, 16.5.1 20F75
iPadOS - addressed in versions 15.7.7 19H357, 15.8 19H370, 16.5.1
watchOS - addressed in versions 8.8.1, 9.5.1 20T570
macOS - addressed in versions 11.7.8 20G1351, 12.6.7 21G651, 13.4.1 22F82

Links to Public Exploits and PoC-codes

External References

https://support.apple.com/en-us/HT213811