PT-2022-21569 · Apple · Ios

Csaba Fitzl + 1 · Published 2022-11-01 · Updated 2022-11-02 · CVE-2022-32909

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16

Description The issue allows an app to potentially access user-sensitive data due to improper handling of caches. This has been addressed with improved cache handling.

Recommendations For iOS versions prior to 16, update to iOS 16 to resolve the issue.

Fix

Weakness Enumeration

CWE-524

Related Identifiers

CVE-2022-32909

Affected Products

Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-32909 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32909 · Vendor Advisory
• https://support.apple.com/en-us/HT213446 · Vendor Advisory