CVE-2022-26730 — Out-of-bounds Write in Apple Macos

CWE-787 — Out-of-bounds Write3 documents3 sources

Severity

8.8HIGHNVD

EPSS

0.7%

top 26.88%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple Macos Ventura

Timeline

PublishedNov 1

Latest updateNov 2

Description

A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages3 packages

▶Appleapple/macos_ventura13

▶CVEListV5apple/macosunspecified — 13

▶NVDapple/macos< 13.0

🔴Vulnerability Details

GHSA

GHSA-mw7j-65f4-c54h: A memory corruption issue existed in the processing of ICC profiles↗2022-11-02

▶

📋Vendor Advisories

Apple

CVE-2022-26730: macOS Ventura 13↗2022-10-24

▶