A vulnerability, which was classified as problematic, has been found in Apple tvOS up to 16.4.1 (Digital Media Player). Affected by this issue is an unknown code block of the component WebKit. The manipulation with an unknown input leads to a out-of-bounds vulnerability. Using CWE to declare the problem leads to CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. Impacted is confidentiality.

The weakness was released 05/18/2023 as HT213761 as confirmed advisory (Website). The advisory is shared for download at support.apple.com. This vulnerability is handled as CVE-2023-28204. Successful exploitation requires user interaction by the victim. Technical details are unknown but an exploit is available. The advisory points out:

Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.

It is declared as highly functional. This issue was added on 05/22/2023 to the CISA Known Exploited Vulnerabilities Catalog with a due date of 06/12/2023:

Apply updates per vendor instructions.

Upgrading to version 16.5 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability. The advisory contains the following remark:

An out-of-bounds read was addressed with improved input validation.

Entries connected to this vulnerability are available at VDB-229550, VDB-229551, VDB-229552 and VDB-229553.

Productinfo

Type

• Digital Media Player

Vendor

• Apple

Name

• tvOS

Version

• 16.4.0
• 16.4.1

License

• commercial

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion