PT-2025-10629 · Apple · Apple Macos+4

Adam Doupé · Published 2025-03-05 · Updated 2025-03-12 · CVE-2022-43454

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.1 watchOS versions prior to 9.2 iOS versions prior to 16.2 iPadOS versions prior to 16.2 tvOS versions prior to 16.2

Description A double free issue was addressed with improved memory management, which may allow an app to execute arbitrary code with kernel privileges.

Recommendations For macOS versions prior to 13.1, update to macOS Ventura 13.1. For watchOS versions prior to 9.2, update to watchOS 9.2. For iOS versions prior to 16.2, update to iOS 16.2. For iPadOS versions prior to 16.2, update to iPadOS 16.2. For tvOS versions prior to 16.2, update to tvOS 16.2.

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2025-02576

CVE-2022-43454

Affected Products

Ios

Ipados

Apple Macos

Tvos

Watchos

References · 14

• https://support.apple.com/en-us/102836 · Vendor Advisory
• https://support.apple.com/en-us/102807 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-43454 · Vendor Advisory
• https://support.apple.com/en-us/102741 · Vendor Advisory
• https://support.apple.com/en-us/102808 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02576 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-43454 · Security Note
• https://twitter.com/CVEnew/status/1899186078755455238 · Twitter Post
• https://t.me/cvetracker/18844 · Telegram Post
• https://t.me/cvenotify/114155 · Telegram Post
• https://t.me/cvenotify/114122 · Telegram Post
• https://t.me/cvedetector/19988 · Telegram Post
• https://vuldb.com/?id.299127 · Note
• https://twitter.com/cybercronai/status/1899683133122904287 · Twitter Post