CVE-2023-32434

CVE-2023-32434 is a high severity software vulnerability that allows for arbitrary code execution with kernel privileges. This flaw, along with two others (CVE-2023-32435 and CVE-2023-32439), were identified as zero-days in June 2023, exploited to deploy the Triangulation spyware via iMessage. The same month, Apple recognized and addressed these vulnerabilities with the release of iOS/iPadOS 16.5.1 and iOS/iPadOS 15.7.7, on June 21, 2023. The subsequent months saw a series of interventions to address various zero-day vulnerabilities, including CVE-2023-32434. In particular, this vulnerability was leveraged again in a shellcode that activated another kernel exploit using a Mach object file, alongside CVE-2023-38606. These incidents underlined the persistence and severity of CVE-2023-32434, which remained a critical security concern despite initial patches. To comprehensively tackle these threats, Apple released security updates addressing four zero-day vulnerabilities: CVE-2023-32434, CVE-2023-32435, CVE-2023-38606, and CVE-2023-41990. These updates aimed to secure a wide range of Apple products, including iPhones, iPods, iPads, macOS devices, Apple TV, and Apple Watch. By doing so, Apple demonstrated its commitment to maintaining robust security measures against evolving cyber threats.