⚠ Actively exploited
Added to CISA KEV on 2022-04-04. Federal agencies required to patch by 2022-04-25. Required action: Apply updates per vendor instructions..

CVE-2022-22675 — Out-of-bounds Write in Apple IOS AND Ipados

CWE-787 — Out-of-bounds WriteCWE-20 — Improper Input ValidationCWE-125 — Out-of-bounds Read12 documents7 sources
Severity
7.8HIGHNVD
EPSS
1.1%
top 21.99%
CISA KEV
KEV
Added 2022-04-04
Due 2022-04-25
Exploit
Exploited in wild
Active exploitation observed
Affected products
9
Apple IOS AND IpadosApple MacosApple Watchos+6 more
Timeline
KEV addedApr 4
KEV dueApr 25
PublishedMay 26
Latest updateMay 27
CISA Required Action: Apply updates per vendor instructions.

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages13 packages

▶Appleapple/macos_monterey12.3.1
▶CVEListV5apple/macosunspecified — 12.3
▶NVDapple/macos11.0 — 11.6.6+1
▶Appleapple/macos_big_sur11.6.6
▶NVDapple/tvos< 15.5

🔴Vulnerability Details

3
GHSA
GHSA-xj88-rf28-xgv9: An out-of-bounds write issue was addressed with improved bounds checking↗2022-05-27
▶
VulnCheck
Apple macOS Out-of-Bounds Write Vulnerability↗2022
▶
Project0
Project Zero RCA: CVE-2022-22675: AppleAVD Overflow in AVC_RBSP::parseHRD↗
▶

📋Vendor Advisories

6
Apple
CVE-2022-22675: macOS Big Sur 11.6.6↗2022-05-16
▶
Apple
CVE-2022-22675: watchOS 8.6↗2022-05-16
▶
Apple
CVE-2022-22675: tvOS 15.5↗2022-05-16
▶
CISA
Apple macOS Out-of-Bounds Write Vulnerability↗2022-04-04
▶
Apple
CVE-2022-22675: iOS 15.4.1 and iPadOS 15.4.1↗2022-03-31
▶

🕵️Threat Intelligence

2
Sentinelone
22 Cybersecurity Twitter Accounts You Should Follow in 2022↗2022-05-23
▶
Sentinelone
22 Cybersecurity Twitter Accounts You Should Follow in 2022↗2022-05-23
▶