Lucene search

AppleCVELIST:CVE-2022-42805

HistoryDec 15, 2022 - 12:00 a.m.

CVE-2022-42805

2022-12-1500:00:00

apple

www.cve.org

integer overflow

input validation

ios 15.6

ipados 15.6

macos monterey 12.5

arbitrary code

kernel privileges

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

32.9%

JSON

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

CNA Affected

[
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "12.5",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Apple",
    "product": "macOS",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "15.6",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

References

support.apple.com/en-us/HT213345

support.apple.com/en-us/HT213346