Lucene search
HistoryNov 01, 2022 - 8:15 p.m.
CVE-2022-26730
memory corruption
icc profiles
macos ventura 13
input validation
arbitrary code execution
image processing
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
66.0%
A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected configurations
Node
applemacosRange<13.0
References
Related
prion
prion
Memory corruption
2022-11-01 20:15:00
cvelist
cvelist
CVE-2022-26730
2022-11-01 00:00:00
cve
cve
CVE-2022-26730
2022-11-01 20:15:17
apple
apple
About the security content of macOS Ventura 13
2022-10-24 00:00:00
openvas
openvas
Apple Mac OS X Security Update (HT213488)
2023-07-25 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
66.0%
Related for NVD:CVE-2022-26730