Vulnerability Details : CVE-2022-22629
Potential exploit
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.
Vulnerability category: OverflowMemory Corruption
Products affected by CVE-2022-22629
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2022-22629
0.35%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 71 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2022-22629
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2022-22629
-
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-22629
-
https://support.apple.com/en-us/HT213193
About the security content of watchOS 8.5 - Apple SupportRelease Notes;Vendor Advisory
-
https://support.apple.com/en-us/HT213188
About the security content of iTunes 12.12.3 for Windows - Apple SupportRelease Notes;Vendor Advisory
-
https://support.apple.com/en-us/HT213186
About the security content of tvOS 15.4 - Apple SupportRelease Notes;Vendor Advisory
-
https://support.apple.com/en-us/HT213183
About the security content of macOS Monterey 12.3 - Apple SupportRelease Notes;Vendor Advisory
-
https://support.apple.com/en-us/HT213187
About the security content of Safari 15.4 - Apple SupportRelease Notes;Vendor Advisory
-
https://support.apple.com/en-us/HT213182
About the security content of iOS 15.4 and iPadOS 15.4 - Apple SupportRelease Notes;Vendor Advisory
Jump to