CVE-2023-32390
Low
Published: 23 June 2023
Published
23 June 2023
Modified
05 December 2024
KEV Added
—
Patch
—
CVSS Score v3.1
2.4
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.0011
29.3th percentile
Risk Priority
5
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2023-32390 is a low-severity Out-of-bounds Read (CWE-125) vulnerability in Apple Ipados. Its CVSS base score is 2.4 (Low).
Operationally, ranked at the 29.3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-36634
Vulnerability details
The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden Photos Album could be viewed without authentication through Visual Lookup.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
apple
ipados
≤ 16.5
apple
iphone os
≤ 16.5
apple
macos
13.0 — 13.4
apple
watchos
≤ 9.5
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.