CVE-2023-38231
Published: 10 August 2023
Summary
CVE-2023-38231 is a high-severity Out-of-bounds Write (CWE-787) vulnerability in Apple Macos. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 9.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Adobe Acrobat Reader versions 23.003.20244 and earlier, along with versions 20.005.30467 and earlier, contain an out-of-bounds write vulnerability tracked as CVE-2023-38231. The flaw is classified under CWE-787 and carries a CVSS 3.1 score of 7.8, reflecting high impact on confidentiality, integrity, and availability when triggered locally.
An attacker can exploit the issue by supplying a malicious file that, once opened by the victim, triggers arbitrary code execution in the context of the current user. No privileges are required beyond the ability to convince the target to open the crafted document, and the attack vector is rated as local with low attack complexity.
Adobe’s security advisory APSB23-30, referenced at helpx.adobe.com/security/products/acrobat/apsb23-30.html, addresses the affected Acrobat Reader releases and supplies the corresponding patch information for remediation.
EPSS for the CVE remains flat at 0.0537 with no material increase after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-42051
Vulnerability details
Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in…
more
that a victim must open a malicious file.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.