CVE-2022-32825

MEDIUM

iPadOS < 15.6 - Unauthorized Kernel Memory Disclosure

Title source: llm
STIX 2.1

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213345
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213340
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213342
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213346
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213344

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 36.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (5)
apple/ipados < 15.6
apple/iphone_os < 15.6
apple/macos 11.0 - 11.6.8
apple/tvos < 15.6
apple/watchos < 8.7
Published Sep 23, 2022
Tracked Since Feb 18, 2026