CVE-2022-42810

MEDIUM

iPadOS < 15.7.1 - Memory Contents Exposure via USD File Processing

Title source: llm
STIX 2.1

Description

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing a maliciously crafted USD file may disclose memory contents.

References (4)

Core 4
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213488
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213489
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213490
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213492

Scores

CVSS v3 5.5
EPSS 0.0007
EPSS Percentile 21.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (5)
apple/ipados < 15.7.1
apple/iphone_os 16.0
apple/iphone_os < 15.7.1
apple/macos < 13.0
apple/tvos < 16.1
Published Nov 01, 2022
Tracked Since Feb 18, 2026