CVEvulnerability

CVE-2022-48618

7.0 HIGH Known exploited Published 2024-01-09 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Apple Multiple Products Memory Corruption Vulnerability — Apple Multiple Products

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.

Added to KEV: 2024-01-31
Remediation due: 2024-02-21
Ransomware use: Unknown
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: https://support.apple.com/en-us/HT213530, https://support.apple.com/en-us/HT213532, https://support.apple.com/en-us/HT213535, https://support.apple.com/en-us/HT213536; https://nvd.nist.gov/vuln/detail/CVE-2022-48618

Status: Analyzed
Published: 2024-01-09
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-367

Description

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

Affected configurations

• apple ipados (< 16.2) • apple iphone os (< 16.2) • apple macos (>= 13.0 < 13.1) • apple tvos (< 16.2) • apple watchos (< 9.2)

Weakness · CWE (1)

CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness

References