Design/Logic Flaw

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32831

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32851

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32851

CVE-2022-32851 describes an out-of-bounds read in the handling of a malicious AppleScript binary. The issue was fixed by the macOS Security Update 2022-005, applying to Catalina, Big Sur 11.6.8, and Monterey 12.5. Impact, as stated, is that processing such AppleScript binaries may cause unexpecte...

CVE-2022-32828

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory...

CVE-2022-32825

The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory...

CVE-2022-32828

CVE-2022-32828 is an Apple memory-handling issue that could allow an app to disclose kernel memory. The vulnerability affects Apple platforms and was addressed in multiple OS updates: iOS/iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5, watchOS 8.7, and related Security Updates. The root cause is des...

CVE-2022-32817

CVE-2022-32817 is an Apple vulnerability describing an out-of-bounds read that may allow an app to disclose kernel memory. The issue affects Apple operating systems including watchOS 8.7, tvOS 15.6, iOS 15.6 / iPadOS 15.6, and macOS Monterey 12.5, with fixes provided in those respective 8.7/15.6/...

CVE-2022-32843

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted Postscript file may result in unexpected app termination or disclosure of process memory...

CVE-2022-32843

CVE-2022-32843 is an out-of-bounds write vulnerability addressed by Apple's Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, and macOS Monterey 12.5. Processing a maliciously crafted PostScript file may cause an app to terminate or disclose process memory. Exploitation would be local (att...

CVE-2022-32853

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32797

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32797

This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32853

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32853

CVE-2022-32853 is an out-of-bounds read in processing a malicious AppleScript binary. Affects macOS via AppleScript handling; root cause is improper input validation. Impact described as possible termination or disclosure of process memory. Mitigation: apply Security Update 2022-005 Catalina, mac...

CVE-2022-32852

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory...

CVE-2022-32852

CVE-2022-32852 affects macOS Monterey 12.5 and relates to an out-of-bounds read when processing a malicious AppleScript binary. The vulnerability arises from insufficient input validation, which could cause unexpected termination or disclosure of process memory. Apple has addressed this by fixing...

CVE-2020-36521

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or...

CVE-2020-36521

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iCloud for Windows 11.4, iOS 14.0 and iPadOS 14.0, watchOS 7.0, tvOS 14.0, iCloud for Windows 7.21, iTunes for Windows 12.10.9. Processing a maliciously crafted tiff file may lead to a denial-of-service or...

CVE-2020-36521

CVE-2020-36521 is an out-of-bounds read in the ImageIO path triggered by processing a malicious TIFF, fixed via input validation improvements. Affected products include Apple iCloud for Windows (11.4 and 7.21) and iOS/iPadOS 14.0+, watchOS 7.0, tvOS 14.0, and iTunes for Windows 12.10.9. Impact pe...