Lucene search

[email protected]NVD:CVE-2022-22634

HistoryMar 18, 2022 - 6:15 p.m.

CVE-2022-22634

2022-03-1818:15:14

CWE-120

[email protected]

web.nvd.nist.gov

buffer overflow

bounds checking

ios 15.4

ipados 15.4

tvos 15.4

malicious application

arbitrary code

kernel privileges

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

32.7%

JSON

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected configurations

Nvd

Node

appleipadosRange<15.4

appleiphone_osRange<15.4

appletvosRange<15.4

References

support.apple.com/en-us/HT213182

support.apple.com/en-us/HT213186

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

32.7%

JSON

Related for NVD:CVE-2022-22634

cve1 prion1 cvelist1 malwarebytes1 apple2