by Kastro
Paper/Archive/CVE-2022-26711

CVE-2022-26711

Apple watchOS — An integer overflow issue was addressed with improved input validation.

EPSS 4%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 90.6.906 × 2018.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

Affected

ProductAffectedFixed inSource
watchOSunspecified – < 8.68.6CNA
watchOSunspecified – < 15.515.5CNA
watchOSunspecified – < 12.412.4CNA
watchOSunspecified – < 15.515.5CNA
watchOSunspecified – < 12.1212.12CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsupport.apple.com/en-us/HT213258refsupport.apple.com/en-us/HT213253refsupport.apple.com/en-us/HT213254refsupport.apple.com/en-us/HT213257refsupport.apple.com/en-us/HT213259