VDB
GHSA-rh7r-jrg6-jcwx
GHSA-rh7r-jrg6-jcwx
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published May 13, 2022
An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to cause a denial of service (infinite recursion) via a crafted image.
Risk scores
CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
- May 13, 2022 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-rh7r-jrg6-jcwx
vulnetix vdb fixes GHSA-rh7r-jrg6-jcwxOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-rh7r-jrg6-jcwx/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-2417 advisory
- http://www.securitytracker.com/id/1038138 url
- http://www.securityfocus.com/bid/97137 url
- https://support.apple.com/HT207601 advisory
- https://support.apple.com/HT207602 advisory
- https://support.apple.com/HT207617 advisory
- https://support.apple.com/HT207615 advisory