CVE-2024-23234 is a memory corruption vulnerability categorized as an out-of-bounds write in the Intel Graphics Driver component of macOS. This flaw allows a local application with limited privileges to potentially execute arbitrary code at the kernel privilege level, which could lead to full system compromise. The issue was resolved by Apple by implementing improved input validation to prevent the out-of-bounds write condition. The fix is included in macOS Monterey 12.7.4, macOS Ventura 13.6.5, and macOS Sonoma 14.4 security updates.

An attacker who can run a local application on an affected macOS system could exploit this vulnerability to execute arbitrary code with kernel privileges. This could allow the attacker to bypass security controls, modify system files, or take complete control of the system. The CVSS v3.1 base score is 7.8 (High), reflecting the significant confidentiality, integrity, and availability impacts if exploited. There are no reports of active exploitation in the wild at this time.

Apple has released official security updates that address this vulnerability in macOS Monterey 12.7.4, macOS Ventura 13.6.5, and macOS Sonoma 14.4. Users and administrators should apply these updates promptly to remediate the issue. Since this is a local privilege escalation vulnerability, restricting local access to trusted users and applications can reduce risk until patches are applied. Patch status is confirmed as fixed by Apple’s official advisories.