PT-2022-4244 · Apple · Ipados+2

Published 2022-08-17 · Updated 2025-10-23 · CVE-2022-32894

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 15.6.1 Apple iPadOS versions prior to 15.6.1 Apple macOS versions prior to 12.5.1

Description An out-of-bounds write issue was addressed with improved bounds checking, allowing an application to potentially execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited. The issue is related to insufficient input validation, which can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Apple iOS versions prior to 15.6.1, update to iOS 15.6.1 or later to resolve the issue. For Apple iPadOS versions prior to 15.6.1, update to iPadOS 15.6.1 or later to resolve the issue. For Apple macOS versions prior to 12.5.1, update to macOS Monterey 12.5.1 or later to resolve the issue.

Fix

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

BDU:2022-05094

CVE-2022-32894

Affected Products

Apple Macos

Ios

Ipados

References · 38

• https://safe-surf.ru/specialists/bulletins-nkcki/682594 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32894 · Vendor Advisory
• https://support.apple.com/en-us/HT213412 · Vendor Advisory
• https://support.apple.com/en-gb/HT213413 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-32894 · Security Note
• https://support.apple.com/en-us/HT213413 · Vendor Advisory
• https://support.apple.com/en-gb/HT213412 · Security Note
• https://bdu.fstec.ru/vul/2022-05094 · Security Note
• https://t.me/echeloneyes/670 · Telegram Post
• https://t.me/echeloneyes/593 · Telegram Post
• https://support.apple.com/en-us/103006 · Note
• https://t.me/cvenotify/36066 · Telegram Post
• https://t.me/true_secator/3367 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-32894 · Note
• https://twitter.com/LiL57877/status/1855887611434619345 · Twitter Post