CVE-2022-22596

HIGH

watchOS <8.5-iOS <15.4-iPadOS <15.4 - Memory Corruption

Title source: llm

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.

References (2)

Core 2

Core References

Release Notes, Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213182

Release Notes, Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT213193

Scores

CVSS v3 7.8

EPSS 0.0033

EPSS Percentile 24.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (3)

apple/ipados < 15.4

apple/iphone_os < 15.4

apple/watchos < 8.5

Published Mar 18, 2022

Tracked Since Feb 18, 2026