Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-71995
HistoryJul 22, 2022 - 12:00 a.m.

Apple iOS and iPadOS ImageIO Buffer Overflow Vulnerability

2022-07-2200:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. Apple iPadOS is an operating system for iPad tablets. error vulnerability, which stems from a boundary error in ImageIO when handling untrusted input, and could be exploited by an attacker to obtain potentially sensitive information.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Related for CNVD-2022-71995