A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
The product does not validate, or incorrectly validates, a certificate.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ipados | Apple | * | 16.7 (excluding) |
| Ipados | Apple | 17.0 (including) | 17.0 (including) |
| Iphone_os | Apple | * | 16.7 (excluding) |
| Iphone_os | Apple | 17.0 (including) | 17.0 (including) |
| Macos | Apple | 13.0 (including) | 13.6 (excluding) |