{"id":"CVE-2023-32354","aliases":["EUVD-2023-36598","GHSA-qm35-5r72-gcjc"],"status":"published","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16...","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.0026,"percentile":0.17899,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2023-06-23T00:00:00Z","modified":"2026-06-17T05:58:38Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT213764","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213757","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213761","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32354"},{"url":"https://github.com/advisories/GHSA-qm35-5r72-gcjc"}],"sources":{"cve":[{"id":"CVE-2023-32354","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory.","status":"published","published":"2023-06-23T00:00:00Z","modified":"2024-12-05T15:55:18.774Z","updated_at":"2026-11-02T14:35:29.381004Z"}],"euvd":[{"id":"EUVD-2023-36598","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory.","status":"published","published":"2023-06-23T00:00:00Z","modified":"2024-12-05T15:55:18Z","updated_at":"2026-11-03T00:04:40.064683Z"}],"ghsa":[{"id":"GHSA-qm35-5r72-gcjc","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16...","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5. An app may be able to disclose kernel memory","status":"published","published":"2023-06-23T18:30:24Z","modified":"2024-04-04T05:07:27Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:56:29.503716Z"}],"nvd":[{"id":"CVE-2023-32354","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, iOS 16.5 and iPadOS 16.5. An app may be able to disclose kernel memory.","status":"published","published":"2023-06-23T18:15:11.513Z","modified":"2026-06-17T05:58:38.2Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:12.414559Z"}]}}