CVE-2022-32839

CRITICAL

macOS - Remote Code Execution via Improved Bounds Checks

Title source: llm
STIX 2.1

Description

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, watchOS 8.7. A remote user may cause an unexpected app termination or arbitrary code execution.

References (6)

Core 6
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213345
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213340
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213342
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213346
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213344
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213343

Scores

CVSS v3 9.8
EPSS 0.0300
EPSS Percentile 85.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-119
Status published
Products (7)
apple/ipados < 15.6
apple/iphone_os < 15.6
apple/mac_os_x 10.15.7 security_update_2020-001 (12 CPE variants)
apple/macos 10.15.7 (2 CPE variants)
apple/macos < 10.15.7
apple/tvos < 15.6
apple/watchos < 8.7
Published Aug 24, 2022
Tracked Since Feb 18, 2026