PT-2022-21552 · Apple · Ios+2

Mohamed Ghannam + 1 · Published 2022-10-24 · Updated 2022-11-03 · CVE-2022-32889

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16 watchOS versions prior to 9

Description The issue allows an app to potentially execute arbitrary code with kernel privileges due to a problem that was addressed with improved memory handling.

Recommendations For iOS versions prior to 16, update to iOS 16 or later. For watchOS versions prior to 9, update to watchOS 9 or later.

Fix

Related Identifiers

CVE-2022-32889

Affected Products

Apple Macos

Ios

Watchos

References · 7

• https://osv.dev/vulnerability/CVE-2022-32889 · Vendor Advisory
• https://support.apple.com/en-us/HT213486 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32889 · Security Note
• https://support.apple.com/en-us/HT213446 · Vendor Advisory
• https://support.apple.com/en-us/102853 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32889 · Note
• https://support.apple.com/en-us/HT213488 · Note