CVE-2022-26764

MEDIUM

iPadOS < 15.5 - Memory Corruption via Improved Validation

Title source: llm
STIX 2.1

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.

References (4)

Core 4
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213258
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213253
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213254
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213257

Scores

CVSS v3 4.7
EPSS 0.0082
EPSS Percentile 52.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-787
Status published
Products (5)
apple/ipados < 15.5
apple/iphone_os < 15.5
apple/macos 12.0 - 12.4
apple/tvos < 15.5
apple/watchos < 8.6
Published May 26, 2022
Tracked Since Feb 18, 2026