Critical severity9.8NVD Advisory· Published Apr 2, 2017· Updated May 13, 2026
CVE-2017-2423
CVE-2017-2423
Description
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. The issue involves the "Security" component. It allows remote attackers to bypass intended access restrictions by leveraging a successful result from a SecKeyRawVerify API call with an empty signature.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/97147nvdThird Party AdvisoryVDB Entry
- support.apple.com/HT207615nvdVendor Advisory
- support.apple.com/HT207617nvdVendor Advisory
- www.securitytracker.com/id/1038138nvd
News mentions
0No linked articles in our index yet.