Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

Information disclosure

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

Buffer overflow

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges...

Design/Logic Flaw

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges...

Design/Logic Flaw

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges...

CVE-2022-22651

CVE-2022-22651 affects macOS Monterey components (notably SMB-related paths) with an out-of-bounds write; Apple fixed this in Monterey 12.3 by improving bounds checking. The vulnerability could allow a remote attacker to cause an unexpected system termination or kernel memory corruption. Public r...

CVE-2022-22664

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22635

CVE-2022-22635 is an out-of-bounds write in AVEVideoEncoder. Apple fixes it in tvOS 15.4, iOS 15.4, and iPadOS 15.4, with the impact described as an app potentially gaining elevated privileges. Affected product/component: AVEVideoEncoder (Apple TV/iOS/iPadOS stack). Root cause: out-of-bounds writ...

CVE-2022-22636

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2022-22636

CVE-2022-22636 is an out-of-bounds write vulnerability in Apple’s AVEVideoEncoder component that could allow an application to execute arbitrary code with kernel privileges. The issue is fixed in Apple’s 15.4 updates for tvOS, iOS, and iPadOS (tvOS 15.4, iOS 15.4, iPadOS 15.4). The vulnerability ...

CVE-2022-22631

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges...

CVE-2022-22634

CVE-2022-22634 affects Apple’s AVEVideoEncoder component on tvOS, iOS, and iPadOS. The issue is a buffer overflow that was addressed by improved bounds checking, enabling arbitrary code execution with kernel privileges on the affected devices. Affected firmwares include tvOS 15.4, iOS 15.4, and i...

CVE-2022-22634

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2022-22626

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process...

CVE-2022-22627

CVE-2022-22627 affects macOS systems via an out-of-bounds read that was addressed by improved bounds checking. The vulnerability is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, and macOS Catalina Security Update 2022-003. Processing a maliciously crafted AppleScript binary may lead to unex...

CVE-2022-22613

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel...

CVE-2022-22607

CVE-2022-22607 describes an out-of-bounds read in Apple Xcode. The issue is mitigated by improved bounds checking and is fixed in Xcode 13.3. Impact per sources: opening a maliciously crafted file may cause unexpected termination or arbitrary code execution. Remediation: update to Xcode 13.3 or l...

CVE-2022-22607

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2022-22605

CVE-2022-22605 affects Apple Xcode components (notably otol) with an out-of-bounds read; exploitation would occur when opening a maliciously crafted file and could lead to arbitrary code execution. Apple fixes this in Xcode 13.3; update to that version or later to mitigate. The vulnerability is s...