CVE-2022-42795 — Out-of-bounds Write in Apple Macos

CWE-787 — Out-of-bounds Write6 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.8%
top 25.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Apple MacosApple WatchosApple Iphone OS+4 more
Timeline
PublishedNov 1
Latest updateNov 2

Description

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 16, iOS 16, macOS Ventura 13, watchOS 9. Processing a maliciously crafted image may lead to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages10 packages

▶NVDapple/tvos< 16.0
▶CVEListV5apple/macosunspecified — 13+1
▶NVDapple/macos< 13.0
▶CVEListV5apple/watchosunspecified — 9+1

🔴Vulnerability Details

1
GHSA
GHSA-3v85-hh9x-mfgc: A memory consumption issue was addressed with improved memory handling↗2022-11-02
▶

📋Vendor Advisories

4
Apple
CVE-2022-42795: macOS Ventura 13↗2022-10-24
▶
Apple
CVE-2022-42795: tvOS 16↗2022-09-12
▶
Apple
CVE-2022-42795: watchOS 9↗2022-09-12
▶
Apple
CVE-2022-42795: iOS 16↗2022-09-12
▶