PT-2023-14147 · Apple · Ios+1

Published 2023-06-23 · Updated 2024-12-06 · CVE-2022-42792

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 16.1 iPadOS versions prior to 16

Description The issue allows an app to potentially read sensitive location information due to inadequate data protection. This has been addressed with improved data protection measures.

Recommendations For iOS versions prior to 16.1, update to iOS 16.1 or later to resolve the issue. For iPadOS versions prior to 16, update to iPadOS 16 or later to resolve the issue.

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2022-42792

Affected Products

Ios

Ipados

References · 6

• https://support.apple.com/en-us/HT213489 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42792 · Security Note
• https://osv.dev/vulnerability/CVE-2022-42792 · Vendor Advisory
• https://t.me/cvenotify/103385 · Telegram Post
• https://t.me/cvenotify/53124 · Telegram Post
• https://t.me/cvenotify/52959 · Telegram Post