PT-2022-21523
CVE-2022-32851
·
Published
2022-07-20
·
Updated
2022-11-02
Description by
CVSS 3.1
7.1
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
macOS versions prior to 11.6.8
macOS versions prior to 12.5
Description
An out-of-bounds read issue was addressed with improved input validation. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.
Recommendations
For macOS versions prior to 11.6.8, update to macOS Big Sur 11.6.8 or later.
For macOS versions prior to 12.5, update to macOS Monterey 12.5 or later.
As a temporary workaround, consider restricting the use of AppleScript binaries until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾