CVE-2022-32936 — Out-of-bounds Read in Apple Macos

CWE-125 — Out-of-bounds Read3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 79.50%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple Macos Ventura

Timeline

PublishedNov 1

Latest updateNov 2

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13. An app may be able to disclose kernel memory.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶Appleapple/macos_ventura13

▶CVEListV5apple/macosunspecified — 13

▶NVDapple/macos< 13.0

🔴Vulnerability Details

GHSA

GHSA-p735-2vg8-f9q2: An out-of-bounds read was addressed with improved input validation↗2022-11-02

▶

📋Vendor Advisories

Apple

CVE-2022-32936: macOS Ventura 13↗2022-10-24

▶