by Kastro
Paper/Archive/CVE-2022-42842

CVE-2022-42842

Apple macOS — The issue was addressed with improved memory handling.

EPSS 2%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 84.3.843 × 2016.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. A remote user may be able to cause kernel code execution.

Affected

ProductAffectedFixed inSource
macOSunspecified – < 11.711.7CNA
tvOSunspecified – < 16.216.2CNA
tvOSunspecified – < 13.113.1CNA
tvOSunspecified – < 12.612.6CNA
tvOSunspecified – < 16.216.2CNA
watchOSunspecified – < 9.29.2CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.apple.com/en-us/HT213535refsupport.apple.com/en-us/HT213532refsupport.apple.com/en-us/HT213530refsupport.apple.com/en-us/HT213536refsupport.apple.com/en-us/HT213534refsupport.apple.com/en-us/HT213533refseclists.org/fulldisclosure/2022/Dec/20refseclists.org/fulldisclosure/2022/Dec/25refseclists.org/fulldisclosure/2022/Dec/23refseclists.org/fulldisclosure/2022/Dec/26refseclists.org/fulldisclosure/2022/Dec/24refseclists.org/fulldisclosure/2022/Dec/27