PT-2022-21502 · Apple · Apple Macos+1

Antonio Zekic + 2 · Published 2022-10-24 · Updated 2023-08-08 · CVE-2022-32827

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16 macOS versions prior to Ventura 13

Description A memory corruption issue was addressed with improved state management. This issue may allow an app to cause a denial-of-service.

Recommendations For iOS versions prior to 16, update to iOS 16 to resolve the issue. For macOS versions prior to Ventura 13, update to macOS Ventura 13 to resolve the issue.

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-32827

Affected Products

Apple Macos

Ios

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2022-32827 · Security Note
• https://support.apple.com/en-us/HT213488 · Vendor Advisory
• https://support.apple.com/en-us/HT213446 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-32827 · Vendor Advisory
• https://t.me/cvenotify/43479 · Telegram Post
• http://packetstormsecurity.com/files/169929/AppleAVD-deallocateKernelMemoryInternal-Missing-Surface-Lock.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32827 · Note
• https://support.apple.com/en-us/102853 · Note
• https://t.me/cvenotify/38058 · Telegram Post