PT-2022-15565 · Apple · Ipados+6

Xingyu Jin · Published 2022-03-14 · Updated 2023-08-08 · CVE-2022-22612

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 15.4 Apple iOS versions prior to 15.4 Apple iPadOS versions prior to 15.4 Apple iTunes versions prior to 12.12.3 for Windows Apple watchOS versions prior to 8.5 Apple macOS Monterey versions prior to 12.3

Description A memory consumption issue was addressed with improved memory handling. Processing a maliciously crafted image may lead to heap corruption.

Recommendations For tvOS, update to version 15.4 or later. For iOS, update to version 15.4 or later. For iPadOS, update to version 15.4 or later. For iTunes on Windows, update to version 12.12.3 or later. For watchOS, update to version 8.5 or later. For macOS Monterey, update to version 12.3 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-22612

Affected Products

Apple Macos

Ios

Ipados

Itunes

Macos Monterey

Tvos

Watchos

References · 9

• https://support.apple.com/en-us/HT213188 · Vendor Advisory
• https://support.apple.com/en-us/HT213193 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22612 · Vendor Advisory
• https://support.apple.com/en-us/HT213182 · Vendor Advisory
• https://support.apple.com/en-us/HT213183 · Vendor Advisory
• https://support.apple.com/en-us/HT213186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22612 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22612 · Note
• https://support.apple.com/en-us/102882 · Note