CVE-2022-32802 — Protection Mechanism Failure in Apple Macos

CWE-693 — Protection Mechanism Failure5 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 75.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Apple MacosApple TvosApple Ipados+3 more
Timeline
PublishedSep 20
Latest updateSep 21

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted file may lead to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages9 packages

▶CVEListV5apple/tvosunspecified — 15.6
▶NVDapple/tvos< 15.6
▶CVEListV5apple/macosunspecified — 12.5
▶NVDapple/macos12.0.0 — 12.5

🔴Vulnerability Details

1
GHSA
GHSA-f2cm-pc3v-mjrg: A logic issue was addressed with improved checks↗2022-09-21
▶

📋Vendor Advisories

3
Apple
CVE-2022-32802: tvOS 15.6↗2022-07-20
▶
Apple
CVE-2022-32802: macOS Monterey 12.5↗2022-07-20
▶
Apple
CVE-2022-32802: iOS 15.6 and iPadOS 15.6↗2022-07-20
▶