PT-2022-15548

CVE-2022-22597

Published

2022-03-14

Updated

2022-04-28

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.6.5 macOS Monterey versions prior to 12.3

Description A memory corruption issue was addressed with improved validation. Processing a maliciously crafted file may lead to arbitrary code execution.

Recommendations For macOS versions prior to 11.6.5, update to macOS Big Sur 11.6.5 or later. For macOS Monterey versions prior to 12.3, update to macOS Monterey 12.3 or later. For macOS Catalina, apply Security Update 2022-003 Catalina.

Exploitability

Fix

Impacts

Researchers

Qi Sun

Robert Ai

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2022-22597