CVE-2022-22587

State: PUBLISHED · Published: 2022-03-18 · Updated: 2025-10-21 · Assigner: apple

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iPadOS 15.3, macOS Big Sur 11.6.3, macOS Monterey 12.2. A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

CWE

CWE-787 — CWE-787 Out-of-bounds Write

Affected

Apple / iOS and iPadOS — v=unspecified <15.3 [affected]
Apple / macOS — v=unspecified <12.2 [affected]
Apple / macOS — v=unspecified <11.6 [affected]

CVSS

(none)

References

https://support.apple.com/en-us/HT213055 x_refsource_MISC
https://support.apple.com/en-us/HT213053 x_refsource_MISC
https://support.apple.com/en-us/HT213054 x_refsource_MISC

Source

cvelistV5-main/cves/2022/22xxx/CVE-2022-22587.json