CVE-2023-32434: Apple Multiple Products Integer Overflow Vulnerability

Overview Sources History

What happened

Apple iOS. iPadOS, macOS, and watchOS contain an integer overflow vulnerability that could allow an application to execute code with kernel privileges.

Affected versions

Multiple Products: See original advisory Fixed: See vendor advisory.

Why it matters

This source correlation may provide earlier visibility while structured CVE metadata is still being updated.

Detection & mitigation

Review the original advisory and validate affected versions.
Apply vendor-provided updates or mitigations when available.

Public PoC references

RepositoryAuthorFirst seenReference

SploitusInteger overflow in XNU VM layer on iOS 13-15.7.6 (A9-A11) enabling full kernel read/write.KitPloit2026-09-22T07:31:45Candidate kitploit.comInteger overflow in XNU VM layer on iOS 13-15.7.6 (A9-A11) enabling full kernel read/write.ru2026-09-22T07:31:45Candidate PoC-in-GitHub · alfiecg24/TrigonDeterministic kernel exploit based on CVE-2023-32434.★ 155alfiecg242025-03-01Candidate PoC-in-GitHub · rkrakesh524/oob_entryoob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙★ 0rkrakesh5242025-08-13Candidate

Corrections Report an issue

Apple Multiple Products Integer Overflow Vulnerability