by Kastro
Paper/Archive/CVE-2022-32941

CVE-2022-32941

Apple macOS — The issue was addressed with improved bounds checks.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 80.4.804 × 2016.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. A buffer overflow may result in arbitrary code execution.

Affected

ProductAffectedFixed inSource
macOSunspecified – < 1313CNA
macOSunspecified – < 11.711.7CNA
macOSunspecified – < 16.116.1CNA
macOSunspecified – < 12.612.6CNA
macOSunspecified – < 15.715.7CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/HT213488refsupport.apple.com/en-us/HT213493refsupport.apple.com/en-us/HT213494refsupport.apple.com/en-us/HT213489refsupport.apple.com/en-us/HT213490