CVE-2023-42839

Vulnerability

A state management issue exists in tvOS, watchOS, macOS Sonoma, iOS, and iPadOS that could allow an app to access sensitive user data. The issue affects tvOS before 17.1, watchOS before 10.1, macOS Sonoma before 14.1, iOS before 17.1, and iPadOS before 17.1 [1][2][3][4].

Exploitation

An attacker would need to have an app installed on the device that can exploit the state management flaw. No additional user interaction beyond running the app is required based on available information. The exact attack vector is not disclosed.

Impact

Successful exploitation could lead to unauthorized access to sensitive user data, potentially including private information such as contacts, messages, or other data stored on the device.

Mitigation

Apple released fixes in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1, and iPadOS 17.1 on October 25, 2023 [1][2][3][4]. Users should update their devices to the latest operating system versions to mitigate this vulnerability.