CVE-2022-32938

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. A shortcut may be able to check the existence of an arbitrary path on the file system.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*

History

09 Jan 2023, 16:41

Type Values Removed Values Added
First Time Apple ipados
CPE cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

02 Nov 2022, 17:21

Type Values Removed Values Added
First Time Apple macos
Apple iphone Os
Apple ipad Os
Apple
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
References (MISC) https://support.apple.com/en-us/HT213488 - (MISC) https://support.apple.com/en-us/HT213488 - Vendor Advisory
References (MISC) https://support.apple.com/en-us/HT213489 - (MISC) https://support.apple.com/en-us/HT213489 - Vendor Advisory

01 Nov 2022, 20:17

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-01 20:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-32938

Mitre link : CVE-2022-32938

CVE.ORG link : CVE-2022-32938


JSON object : View

Products Affected

apple

  • macos
  • iphone_os
  • ipados