CVE-2017-13906 - A memory corruption issue was addressed with improved memory handling

Back Back to CVE browser

HIGH

A memory corruption issue was addressed with improved memory handling

Published Dec 23, 2021

7.8

HIGH

CVSS 3.1

EPSS 0.61%

Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges.

Affected products

Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <10.13

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<10.13

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

https://support.apple.com/en-us/HT208144
x_refsource_MISCVendor Advisory
https://support.apple.com/en-us/HT208221
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://support.apple.com/en-us/HT208144		x_refsource_MISCVendor Advisory
https://support.apple.com/en-us/HT208221		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Dec 23, 2021

Updated Aug 5, 2024

Reserved Aug 30, 2017

Link CVE-2017-13906

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-13906

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-13906