The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app may be able to execute arbitrary code with kernel privileges.
References
| Link | Resource |
|---|---|
| https://support.apple.com/en-us/HT213488 | Vendor Advisory |
| https://support.apple.com/en-us/HT213489 | Vendor Advisory |
| https://support.apple.com/en-us/HT213491 | Vendor Advisory |
| https://support.apple.com/en-us/HT213492 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
09 Jan 2023, 16:41
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | |
| First Time |
Apple ipados
|
02 Nov 2022, 17:20
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://support.apple.com/en-us/HT213492 - Vendor Advisory | |
| References | (MISC) https://support.apple.com/en-us/HT213488 - Vendor Advisory | |
| References | (MISC) https://support.apple.com/en-us/HT213491 - Vendor Advisory | |
| References | (MISC) https://support.apple.com/en-us/HT213489 - Vendor Advisory | |
| First Time |
Apple macos
Apple iphone Os Apple ipad Os Apple Apple tvos Apple watchos |
|
| CPE | cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo |
01 Nov 2022, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-11-01 20:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-32940
Mitre link : CVE-2022-32940
CVE.ORG link : CVE-2022-32940
JSON object : View
Products Affected
apple
- iphone_os
- macos
- ipados
- tvos
- watchos
CWE