{"id":"CVE-2023-32372","aliases":["EUVD-2023-36616","GHSA-cq3h-j934-fgjg"],"status":"published","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16...","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00247,"percentile":0.1611,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2023-06-23T00:00:00Z","modified":"2026-06-17T05:58:42Z","products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT213758","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213764","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213757","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://support.apple.com/en-us/HT213761","tags":["x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32372"},{"url":"https://github.com/advisories/GHSA-cq3h-j934-fgjg"}],"sources":{"cve":[{"id":"CVE-2023-32372","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.","status":"published","published":"2023-06-23T00:00:00Z","modified":"2024-12-05T21:24:37.172Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:35:29.01154Z"}],"euvd":[{"id":"EUVD-2023-36616","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.","status":"published","published":"2023-06-23T00:00:00Z","modified":"2024-12-05T21:24:37Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:39.661841Z"}],"ghsa":[{"id":"GHSA-cq3h-j934-fgjg","title":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16...","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, macOS Ventura 13.4, watchOS 9.5, tvOS 16.5. Processing an image may result in disclosure of process memory","status":"published","published":"2023-06-23T18:30:24Z","modified":"2024-04-11T21:21:43Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:57:10.781816Z"}],"nvd":[{"id":"CVE-2023-32372","description":"An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. Processing an image may result in disclosure of process memory.","status":"published","published":"2023-06-23T18:15:11.963Z","modified":"2026-06-17T05:58:42.107Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:08:12.414559Z"}]}}