CVE-2022-42855

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2. An app may be able to use arbitrary entitlements...

CVE-2022-42855

creationtimestamp| type| source ---|---|--- 2023-01-12 16:59:00+00:00| seen| https://googleprojectzero.blogspot.com/2023/01/der-entitlements-brief-return-of.html 2023-01-15 14:05:51+00:00| published-proof-of-concept| https://t.me/crackcodes/2275 2023-01-15 14:33:26+00:00|...

CVE-2022-42855

A logic issue in the libCoreEntitlements library allowed for the bypass of security checks by hiding entitlements within other DER-encoded structures. The root cause was that three different traversal algorithms—recursivelyValidateEntitlements , der_vm_iterate , and der_vm_execute_nocopy —handled...

CVE-2022-42855

A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2. An app may be able to use arbitrary entitlements...