PT-2022-15557 · Apple · Xcode+1

Hjy79425575 · Published 2022-03-14 · Updated 2022-03-23 · CVE-2022-22605

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 13.3

Description An out-of-bounds read issue was addressed with improved bounds checking. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

Recommendations For versions prior to 13.3, update to Xcode 13.3 to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-22605

Affected Products

Apple Macos

Xcode

References · 5

• https://osv.dev/vulnerability/CVE-2022-22605 · Vendor Advisory
• https://support.apple.com/en-us/HT213189 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22605 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22605 · Note
• https://support.apple.com/en-us/103238 · Note