Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2023-38603: The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service.
CVE-2023-38603 · published 3 years ago
Summary
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| apple | ipados |
< 15.7.8 >= 16.0, < 16.6 cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* |
| apple | iphone_os |
< 15.7.8 >= 16.0, < 16.6 cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* |
| apple | macos |
< 11.7.9 >= 12.0, < 12.6.8 >= 13.0, < 13.5 cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* |
Original advisory text
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service.
The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A remote user may be able to cause a denial-of-service.
References
- https://support.apple.com/en-us/HT213841 Vendor Advisory
- https://support.apple.com/en-us/HT213843 Vendor Advisory
- https://support.apple.com/kb/HT213842 Vendor Advisory
- https://support.apple.com/kb/HT213844 Vendor Advisory
- https://support.apple.com/kb/HT213845 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Timeline
Published27 Jul 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2023-38603 · NVD
Track software like this
Free during beta