Lucene search

K
nvd[email protected]NVD:CVE-2022-32830
HistoryFeb 27, 2023 - 8:15 p.m.

CVE-2022-32830

2023-02-2720:15:11
CWE-125
web.nvd.nist.gov
cve-2022-32830
out-of-bounds read
bounds checking
maliciously crafted image
user information disclosure

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.6, iOS 15.6 and iPadOS 15.6. Processing a maliciously crafted image may lead to disclosure of user information.

Affected configurations

NVD
Node
appleipadosRange<15.6
OR
appleiphone_osRange<15.6
OR
appletvosRange<15.6

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

Related for NVD:CVE-2022-32830