{"id":"CVE-2023-28185","state":"PUBLISHED","title":"An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 1","description":"An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. An app may be able to cause a denial-of-service.","publishedAt":"2024-01-10T22:03:45.995Z","updatedAt":"2025-06-03T14:26:27.624Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple iOS and iPadOS","Apple macOS","Apple watchOS","Apple tvOS"],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.4","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"12.6","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.4","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.4","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"11.7","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"15.7","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213676","https://support.apple.com/en-us/HT213677","https://support.apple.com/en-us/HT213678","https://support.apple.com/en-us/HT213674","https://support.apple.com/en-us/HT213675","https://support.apple.com/en-us/HT213673"],"weaknesses":["CWE-190"],"ingestedAt":"2026-10-29T20:05:52.290Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/28xxx/CVE-2023-28185.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-28185","state":"PUBLISHED","datePublished":"2024-01-10T22:03:45.995Z","dateUpdated":"2025-06-03T14:26:27.624Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2023-03-13T18:37:25.755Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An integer overflow was addressed through improved input validation. This issue is fixed in tvOS 16.4, macOS Big Sur 11.7.5, iOS 16.4 and iPadOS 16.4, watchOS 9.4, macOS Monterey 12.6.4, iOS 15.7.4 and iPadOS 15.7.4. An app may be able to cause a denial-of-service."}],"affected":[{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.4","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"12.6","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.4","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.4","versionType":"custom"}]},{"vendor":"Apple","product":"macOS","versions":[{"version":"unspecified","status":"affected","lessThan":"11.7","versionType":"custom"}]},{"vendor":"Apple","product":"iOS and iPadOS","versions":[{"version":"unspecified","status":"affected","lessThan":"15.7","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213676"},{"url":"https://support.apple.com/en-us/HT213677"},{"url":"https://support.apple.com/en-us/HT213678"},{"url":"https://support.apple.com/en-us/HT213674"},{"url":"https://support.apple.com/en-us/HT213675"},{"url":"https://support.apple.com/en-us/HT213673"}],"problemTypes":[{"descriptions":[{"lang":"en","description":"An app may be able to cause a denial-of-service"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2024-01-10T22:03:45.995Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213676","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213677","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213678","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213674","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213675","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213673","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T12:30:24.635Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.5,"attackVector":"LOCAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","integrityImpact":"NONE","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-05-08T20:16:00.720245Z","id":"CVE-2023-28185","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-190","type":"CWE","lang":"en","description":"CWE-190 Integer Overflow or Wraparound"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-03T14:26:27.624Z"}}]}}}