CVE-2022-46693

published 2022-12-15

CVE-2022-46693: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
apple	icloud	< 14.1	14.1
apple	icloud_for_windows	—	—
apple	icloud_for_windows	>= unspecified < 14.1	14.1
apple	ios_16.2_and_ipados	—	—
apple	ipados	< 16.2	16.2
apple	iphone_os	< 16.2	16.2
apple	macos	< 13.1	13.1
apple	macos_ventura	—	—
apple	tvos	< 16.2	16.2
apple	tvos	>= unspecified < 16.2	16.2
apple	tvos	>= unspecified < 13.1	13.1
apple	tvos16.2	—	—
apple	watchos	< 9.2	9.2
apple	watchos	—	—
apple	watchos	>= unspecified < 9.2	9.2

CWE-787