CVEvulnerability
CVE-2022-32815
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-09-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arbitrary code with kernel privileges.
Affected configurations
• apple ipados (< 15.6)
• apple iphone os (< 15.6)
• apple mac os x 10.15.7
• apple macos (< 10.15.7)
• apple macos (>= 11.0 < 11.6.8)
• apple macos (>= 12.0 < 12.5)
• apple macos 10.15.7
• apple tvos (< 15.6)
• apple watchos (< 8.7)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/HT213340 Vendor Advisory
- https://support.apple.com/en-us/HT213342 Vendor Advisory
- https://support.apple.com/en-us/HT213343 Vendor Advisory
- https://support.apple.com/en-us/HT213344 Vendor Advisory
- https://support.apple.com/en-us/HT213345 Vendor Advisory
- https://support.apple.com/en-us/HT213346 Vendor Advisory
- https://support.apple.com/en-us/HT213340 Vendor Advisory
- https://support.apple.com/en-us/HT213342 Vendor Advisory
- https://support.apple.com/en-us/HT213343 Vendor Advisory
- https://support.apple.com/en-us/HT213344 Vendor Advisory
- https://support.apple.com/en-us/HT213345 Vendor Advisory
- https://support.apple.com/en-us/HT213346 Vendor Advisory