CVE-2022-26751

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

Code injection

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges...

Memory corruption

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2022-26774

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. A local attacker may be able to elevate their privileges...

CVE-2022-26774

CVE-2022-26774 affects Apple iTunes running on Windows prior to 12.12.4. The vulnerability is a logic issue related to improved state management, which could allow a local attacker to elevate privileges. Apple’s security content for iTunes 12.12.4 for Windows confirms the fix is included in this ...

CVE-2022-26773

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

CVE-2022-26773

CVE-2022-26773 applies to Apple iTunes for Windows, where a logic issue in Mobile Device Service could allow an application to delete files without proper permissions. Apple’s security content for iTunes 12.12.4 for Windows describes this as a local issue (with privilege elevation risk) resolved ...

CVE-2022-26773

A logic issue was addressed with improved state management. This issue is fixed in iTunes 12.12.4 for Windows. An application may be able to delete files for which it does not have permission...

CVE-2022-26711

An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution...

CVE-2022-26751

CVE-2022-26751 describes a memory corruption issue triggered by processing a maliciously crafted image. The vulnerability is addressed by Apple in iTunes 12.12.4 for Windows, and in iOS 15.5 / iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, and macOS Monterey 12.4. The fixed...

CVE-2022-26751

A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2022-26711

CVE-2022-26711 describes an integer overflow in Apple's ImageIO WebP parsing. The root cause is an overflow in row-bytes calculation leading to an undersized buffer and out-of-bounds access during image decoding, enabling arbitrary code execution in apps using ImageIO (Safari, Preview, Mail, Mess...

PT-2022-18073 · Apple · Itunes

Name of the Vulnerable Software and Affected Versions: Apple iTunes versions prior to 12.12.4 for Windows Description: A logic issue was addressed with improved state management, allowing an application to potentially delete files for which it does not have permission. Recommendations: For Apple...

PT-2022-18074 · Apple · Itunes

Name of the Vulnerable Software and Affected Versions: iTunes versions prior to 12.12.4 Description: A logic issue was addressed with improved state management, which could allow a local attacker to elevate their privileges. Recommendations: For versions prior to 12.12.4, update to iTunes 12.12.4...

Apple iTunes < 12.12.4 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213259 advisory. - A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for...

Apple iTunes < 12.12.4 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.4. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213259 advisory. - A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for...

Apple iTunes 权限许可和访问控制问题漏洞

Apple iTunes is a suite of media player applications from Apple Inc. that are used to play and manage digital music and video files. A permission and access control issue exists in Apple iTunes Mobile Device Service, which arises from the application not properly securing the mobile device servic...

Apple iTunes 输入验证错误漏洞

Apple iTunes is a suite of media player applications from Apple Inc. that are used to play and manage digital music and video files. Apple iTunes suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input. A local attacker can exploit this...

KLA12540 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Integer overflow vulnerability in ImageIO can be exploited to cause execute...