Description
A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 8.6, tvOS 15.5, iOS 15.5 and iPadOS 15.5. An application may be able to execute arbitrary code with kernel privileges.
References (5)
Core 5
Core References
Mailing List mailing-list
http://seclists.org/fulldisclosure/2023/Mar/21
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213253
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213254
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213258
Vendor Advisory
https://support.apple.com/kb/HT213675
Scores
CVSS v3
7.8
EPSS
0.0108
EPSS Percentile
60.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (4)
apple/ipados
< 15.5
apple/iphone_os
< 15.5
apple/tvos
< 15.5
apple/watchos
< 8.6
Published
May 26, 2022
Tracked Since
Feb 18, 2026