CVE-2023-32368

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. Processing a 3D model may result in disclosure of process memory.

• CWE-125

• https://support.apple.com/en-us/HT213757Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213758Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213759Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213761Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213764Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213757Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213758Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213759Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213761Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT213764Release Notes, Vendor Advisory

Published

Jun 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32362Error handling was changed to not reveal sensitive informati…6.5
• CVE-2023-32363A permissions issue was addressed by removing vulnerable cod…5.5
• CVE-2023-32364A logic issue was addressed with improved restrictions. This…8.6
• CVE-2023-32365The issue was addressed with improved checks. This issue is …2.4
• CVE-2023-32366An out-of-bounds write issue was addressed with improved inp…7.8
• CVE-2023-32367This issue was addressed with improved entitlements. This is…5.5
• CVE-2023-32369A logic issue was addressed with improved state management. …6
• CVE-2023-3237A vulnerability classified as critical was found in OTCMS up…9.8
• CVE-2023-32370A logic issue was addressed with improved validation. This i…5.3
• CVE-2023-32371The issue was addressed with improved checks. This issue is …6.3
• CVE-2023-32372An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2023-32373A use-after-free issue was addressed with improved memory ma…8.8