Search: CVE-2023-43000

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6. Processing maliciously crafted web content may lead to memory corruption.

The Coruna iOS exploit framework, evolving over seven months, uses two exploit chains targeting different iOS versions. It delivers malicious code through over 600 domains embedded in web pages without requiring app installation or user consent. The framework includes advanced native modules capable of kernel memory manipulation, Apple Mobile File Integrity state changes, process memory reads, encrypted command-and-control communication, and artifact deletion. A supply-chain compromise via the npm package art-template enables delivery through legitimate application infrastructure, bypassing domain-based defenses.