CVE Watch—

CVE-2023-41064

Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

CVSS

—

No CVSS

EPSS

15.3%

p96

KEV

YES

Sep 11, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

15.3%EPSS · 30 days15.3%

2026-06-302026-07-16

KEV catalog record

Product

Apple / iOS, iPadOS, and macOS

Vulnerability

Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

Added to KEV

Sep 11, 2023

Remediate by

Oct 2, 2023

Known ransomware use

Summary description

Apple iOS, iPadOS, and macOS contain a buffer overflow vulnerability in ImageIO when processing a maliciously crafted image, which may lead to code execution. This vulnerability was chained with CVE-2023-41061.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://support.apple.com/en-us/HT213905, https://support.apple.com/en-us/HT213906; https://nvd.nist.gov/vuln/detail/CVE-2023-41064

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-28206—

97.6%

KEV—79Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability—CVE-2025-43300—

97.1%

KEV—79Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability—CVE-2022-22620—

96.6%

KEV—79Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability—CVE-2021-30858—

96.0%

KEV—79Apple iOS, iPadOS, macOS Use-After-Free Vulnerability—CVE-2021-1870—

94.1%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—CVE-2021-1871—

93.5%

KEV—78Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability—