CVE-2023-23528

Vulnerability

An out-of-bounds read vulnerability exists in the Bluetooth stack of Apple iOS, iPadOS, and tvOS. The issue is present in versions prior to iOS 16.4, iPadOS 16.4, and tvOS 16.4. Processing a maliciously crafted Bluetooth packet can trigger an out-of-bounds read, leading to disclosure of process memory. [1][2]

Exploitation

An attacker in close proximity to a vulnerable device could send a specially crafted Bluetooth packet. No authentication or user interaction is required beyond the device having Bluetooth enabled and being in range. The attacker would need to be within Bluetooth range (typically up to 10 meters) and send the malicious packet to trigger the out-of-bounds read.

Impact

Successful exploitation results in disclosure of process memory, potentially exposing sensitive information such as cryptographic keys, passwords, or other data resident in the kernel or application memory. The impact is limited to information disclosure; no code execution is indicated.

Mitigation

Apple has addressed the issue in iOS 16.4, iPadOS 16.4, and tvOS 16.4, released on March 27, 2023. Users should update their devices to the latest available versions. No workarounds are available; the only mitigation is to apply the security update. [1][2]