VDB
CISA-2022-46694
CISA-2022-46694
PUBLISHED
CVSS 7.8 HIGH
Reported by apple · Published December 15, 2022
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2, watchOS 9.2. Parsing a maliciously crafted video file may lead to kernel code execution.
Risk Scores
CVSS 3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | tvOS | unspecified |
| Apple | tvOS | unspecified |
| Apple | tvOS | unspecified |
| Apple | watchOS | unspecified |
| Apple | watchOS | unspecified, * |
| Apple | tvOS | unspecified, unspecified, unspecified |
Timeline
- Dec 15, 2022 CVE Published
- Apr 21, 2025 CVE Updated
References
- 20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-8 watchOS 9.2 mailing-list