VYPR
Unrated severityNVD Advisory· Published Jun 23, 2023· Updated Dec 5, 2024

CVE-2023-32389

CVE-2023-32389

Description

Kernel memory disclosure in Apple iOS, iPadOS, watchOS, tvOS, and macOS Ventura addressed in version updates released May 18, 2023.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Kernel memory disclosure in Apple iOS, iPadOS, watchOS, tvOS, and macOS Ventura addressed in version updates released May 18, 2023.

Vulnerability

This issue, present in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, and macOS Ventura 13.4, allows an app to disclose kernel memory. The problem was addressed with improved redaction of sensitive information. It is fixed in the respective versions listed above [1][2][3][4].

Exploitation

An attacker would need to have a malicious app installed on the affected device. No specific user interaction beyond installing the app is required. The app could then read kernel memory, bypassing normal privacy protections [1][2].

Impact

Successful exploitation allows the attacker to disclose kernel memory, potentially revealing sensitive information. The CIA outcome is information disclosure, and the attacker gains access to data normally protected by the kernel [1][2].

Mitigation

Users should update to iOS 16.5, iPadOS 16.5, watchOS 9.5, tvOS 16.5, or macOS Ventura 13.4, which were released on May 18, 2023. No workarounds have been disclosed [1][2][3][4].

AI Insight generated on May 25, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

7

Patches

0

No patches discovered yet.

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

4

News mentions

0

No linked articles in our index yet.