About the security content of iTunes 12.12.4 for Windows

About the security content of iTunes 12.12.4 for Windows This document describes the security content of iTunes 12.12.4 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

CVE-2022-22629

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22612

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption...

CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-22612

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption...

CVE-2022-22612

CVE-2022-22612 involves a memory consumption issue that can lead to heap corruption when processing a maliciously crafted image. Affected products include Apple media frameworks across macOS Monterey 12.3, tvOS 15.4, iOS 15.4, iPadOS 15.4, watchOS 8.5, and iTunes 12.12.3 for Windows. The root cau...

CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-22611

CVE-2022-22611 is an Apple vulnerability in ImageIO where processing a maliciously crafted image triggers an out-of-bounds read, addressed by input validation improvements. Affected products include tvOS, iOS, iPadOS, watchOS, macOS Monterey, and iTunes for Windows; fixed in tvOS 15.4, iOS 15.4, ...

Apple iTunes U < 3.8.3 A Vulnerability (credentialed check)

The version of Apple iTunes U installed on the remote iOS host is prior to 3.8.3. It is, therefore, affected by a vulnerability as referenced in the HT212809 advisory. - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none...

Apple iTunes U < 3.8.3 A Vulnerability (uncredentialed check)

The version of Apple iTunes U installed on the remote iOS host is prior to 3.8.3. It is, therefore, affected by a vulnerability as referenced in the HT212809 advisory. - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none...

Apple iTunes < 12.12.3 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...

Apple iTunes < 12.12.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...

KLA12486 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A code execution vulnerability in ImageIO can be exploited via special crafted image to...

About the security content of iTunes 12.12.3 for Windows

About the security content of iTunes 12.12.3 for Windows This document describes the security content of iTunes 12.12.3 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

AlmaLinux 8 : GNOME (ALSA-2021:4381)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4381 advisory. - A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lea...

CVE-2022-23609

CVE-2022-23609 affects iTunesRPC-Remastered, a Windows Discord Rich Presence utility. Multiple sources describe a path traversal vulnerability where improper sanitization of user input enables file deletion, constrained only by process permissions. Connected Red Hat, CNVD/CNNVD, OSV, CVE records ...

CVE-2022-23611

Summary (CVE-2022-23611): The issue affects iTunesRPC-Remastered, a Windows Discord Rich Presence utility for iTunes. It states that certain versions did not properly sanitize image file paths, causing an OS-level command injection vulnerability. The vulnerability is described as being fixed in c...

CVE-2022-23611 OS command injection in iTunesRPC-Remastered

iTunesRPC-Remastered is a Discord Rich Presence for iTunes on Windows utility. In affected versions iTunesRPC-Remastered did not properly sanitize image file paths leading to OS level command injection. This issue has been patched in commit cdcd48b. Users are advised to upgrade...

CVE-2022-23603

CVE-2022-23603 affects iTunesRPC-Remastered, a Discord rich presence app for iTunes/Apple Music. The root cause is unsanitized user input before commit 24f43aa, enabling code injection. The issue is documented across multiple sources (including Red Hat, NVD, OSV, CVE lists) with no public workaro...