Kernel Privilege Arbitrary Code Execution in Apple Neural Engine

Successful exploitation allows a local application to achieve arbitrary code execution in kernel context. This can result in full compromise of the affected device security boundary, including bypass of app sandboxing, elevation to the highest local privilege level, tampering with kernel state, and potential access to sensitive system resources and protected data.

If immediate patching is not possible, reduce exposure by limiting installation and execution of untrusted applications, enforcing strong application control and MDM policies on managed Apple devices, and prioritizing updates on devices equipped with Apple Neural Engine. Because the issue is locally exploitable by an app, minimizing the ability for attackers to run code on the device is the primary interim mitigation. No specific vendor workaround beyond updating is provided in the supplied content.

Apply the vendor fixes provided by Apple. The advisory states the issue is fixed in watchOS 9.6, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, macOS Ventura 13.5, iOS 15.7.8, iPadOS 15.7.8, iOS 16.6, and iPadOS 16.6. Systems running earlier affected versions should be updated to the corresponding fixed release or later.