Apple tvOS vulnerabilities

CVE-2022-22675 [HIGH] CWE-787 CVE-2022-22675: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CVE-2022-26764 [MEDIUM] CWE-787 CVE-2022-26764: A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6 A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.

CVE-2022-26766 [MEDIUM] CWE-295 CVE-2022-26766: A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iO A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation.

CVE-2022-26706 [MEDIUM] CVE-2022-26706: An access issue was addressed with additional sandbox restrictions on third-party applications. This An access issue was addressed with additional sandbox restrictions on third-party applications. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A sandboxed process may be able to circumvent sandbox restrictions.

CVE-2022-26765 [MEDIUM] CWE-362 CVE-2022-26765: A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvO A race condition was addressed with improved state handling. This issue is fixed in watchOS 8.6, tvOS 15.5, macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

CVE-2022-26724 [MEDIUM] CWE-287 CVE-2022-26724: An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15 An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may be able to enable iCloud Photos without authentication.

CVE-2022-26775 [CRITICAL] CVE-2022-26775: tvOS 15.5 Apple Security Update: About the security content of tvOS 15.5 Product: tvOS Version: 15.5 CVE: CVE-2022-26775 Component: LaunchServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions on third-party applications.

CVE-2022-26776 [CRITICAL] CVE-2022-26776: tvOS 15.5 Apple Security Update: About the security content of tvOS 15.5 Product: tvOS Version: 15.5 CVE: CVE-2022-26776 Component: LaunchServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions on third-party applications.

CVE-2022-26708 [CRITICAL] CVE-2022-26708: tvOS 15.5 Apple Security Update: About the security content of tvOS 15.5 Product: tvOS Version: 15.5 CVE: CVE-2022-26708 Component: LaunchServices Impact: A sandboxed process may be able to circumvent sandbox restrictions Description: An access issue was addressed with additional sandbox restrictions on third-party applications.

CVE-2022-26714 [HIGH] CVE-2022-26714: tvOS 15.5 Apple Security Update: About the security content of tvOS 15.5 Product: tvOS Version: 15.5 CVE: CVE-2022-26714 Component: Kernel Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved validation.

CVE-2022-26745 [MEDIUM] CVE-2022-26745: tvOS 15.5 Apple Security Update: About the security content of tvOS 15.5 Product: tvOS Version: 15.5 CVE: CVE-2022-26745 Component: Wi-Fi Impact: A malicious application may disclose restricted memory Description: A memory corruption issue was addressed with improved validation.

CVE-2022-1622 [MEDIUM] CWE-125 CVE-2022-1622: LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing atta LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit b4e79bfa.

CVE-2022-22635 [CRITICAL] CWE-787 CVE-2022-22635: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvO An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to gain elevated privileges.

CVE-2022-22641 [CRITICAL] CWE-416 CVE-2022-22641: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15 A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.

CVE-2022-22632 [CRITICAL] CVE-2022-22632: A logic issue was addressed with improved state management. This issue is fixed in tvOS 15.4, iOS 15 A logic issue was addressed with improved state management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, macOS Monterey 12.3. A malicious application may be able to elevate privileges.

CVE-2022-22611 [HIGH] CWE-125 CVE-2022-22611: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4 An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution.

CVE-2022-22584 [HIGH] CWE-787 CVE-2022-22584: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution.

CVE-2022-22634 [HIGH] CWE-120 CVE-2022-22634: A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

CVE-2022-22614 [HIGH] CWE-416 CVE-2022-22614: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15 A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.

CVE-2022-22578 [HIGH] CVE-2022-22578: A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and A logic issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. A malicious application may be able to gain root privileges.