VDB
GHSA-jwvc-gc5c-g22h
GHSA-jwvc-gc5c-g22h
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published May 14, 2022
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app that triggers type confusion.
Risk scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Timeline
- May 14, 2022 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-jwvc-gc5c-g22h
vulnetix vdb fixes GHSA-jwvc-gc5c-g22h
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-jwvc-gc5c-g22h/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://support.apple.com/HT208325 url
- https://support.apple.com/HT208327 url
- http://www.securitytracker.com/id/1039966 url
- https://nvd.nist.gov/vuln/detail/CVE-2017-13855 advisory
- https://support.apple.com/HT208331 url
- https://support.apple.com/HT208334 url
- http://www.securitytracker.com/id/1039952 url
- http://www.securitytracker.com/id/1039953 url
- https://www.exploit-db.com/exploits/43318 url
- http://www.securityfocus.com/bid/102100 url