CVE-2023-42881 is a high severity (CVSS 7.8) memory handling flaw in AppleVA, the video acceleration framework on macOS. Processing a file may lead to unexpected app termination or arbitrary code execution. Apple fixed it in macOS Sonoma 14.2. Update any Mac still running an earlier Sonoma build or an older release.
What's affected
The record lists macOS, fixed in macOS Sonoma 14.2. Apple's Sonoma 14.2 bulletin has an AppleVA entry, with the impact "Processing a file may lead to unexpected app termination or arbitrary code execution" and the description "The issue was addressed with improved memory handling". Apple added this entry on December 12, 2023, the release date.
The record's weakness is CWE-119, a general class for operations on a memory buffer that go outside its bounds. The same bulletin lists a sibling AppleVA issue for image processing under a different CVE, so check you are reading the right line.
The bulletin is scoped to macOS Sonoma. Whether earlier release lines carry the same code is not stated in the sources we read.
How to check if you're exposed
On a Mac, the Terminal can print the installed macOS version and list pending updates:
sw_vers
softwareupdate --list
About This Mac in the Apple menu shows the same version number.
What to do now
- Update to macOS Sonoma 14.2 or later.
- Hold off opening media files from untrusted sources on Macs that cannot update yet.
- Use your management tool to list Macs below 14.2 and set a deadline.
- Check the status of Macs on Ventura or Monterey in Apple's security releases page.
- Confirm the new version number on a sample of devices after rollout.
Why it matters
Media frameworks parse files that arrive by email, chat and the web. When they mishandle memory the symptom can be as mild as an app closing, or as bad as code running inside that app. The vector in the record is local, with user interaction, so someone has to open the file.
CWE-119 is a broad memory buffer class. The record does not narrow it further and Apple's description stays at the level of improved memory handling. The KEV flag is false. The fix is a routine update, but file handling bugs are a good reason not to let laptops lag by a point release.
Quick check
Is it enough to avoid opening unknown files?
That lowers risk, but the fix is the update. Files can arrive through apps that preview them automatically.
Sources
- Apple: About the security content of macOS Sonoma 14.2
- Apple: macOS Sonoma 14.2 bulletin (legacy link)
Last reviewed: 19 October 2026.
