CVE-2022-32897
published 2024-06-10CVE-2022-32897: A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may…
PriorityP341high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.42%
34.5th percentile
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos | < 12.5 | 12.5 |
| apple | macos | >= unspecified < 12.5 | 12.5 |
| apple | macos_monterey | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2022-32897: macOS Monterey 12.5
vendor_apple·2022-07-20·CVSS 7.8
CVE-2022-32897 [HIGH] CVE-2022-32897: macOS Monterey 12.5
Apple Security Update: About the security content of macOS Monterey 12.5
Product: macOS Monterey
Version: 12.5
CVE: CVE-2022-32897
Component: ImageIO
Impact: Processing a maliciously crafted tiff file may lead to arbitrary code execution
Description: A memory corruption issue was addressed with improved validation.
GHSA
GHSA-jp38-8m55-7qcq: A memory corruption issue was addressed with improved validation
ghsa_unreviewed·2024-06-10
CVE-2022-32897 [HIGH] CWE-787 GHSA-jp38-8m55-7qcq: A memory corruption issue was addressed with improved validation
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-10
Published