HIGH
An out-of-bounds read issue was addressed with improved input validation
Published May 26, 2022
7.1
HIGHCVSS 3.1
EPSS 1.07%
Description
An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<2022
- Version
-
- Version unspecifiedStatusaffectedConstraints<11.6
- Version unspecifiedStatusaffectedConstraints<12.4
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Apple | Security Update - Catalina | n/a |
| |||||||||
| Apple | macOS | n/a |
|
OR
- > 10.15 · < 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- ≥ 11.0 · < 11.6.6
- ≥ 12.0.0 · < 12.4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (3)
- https://support.apple.com/en-us/HT213255 x_refsource_MISCRelease NotesVendor Advisory
- https://support.apple.com/en-us/HT213256 x_refsource_MISCRelease NotesVendor Advisory
- https://support.apple.com/en-us/HT213257 x_refsource_MISCRelease NotesVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://support.apple.com/en-us/HT213255 | x_refsource_MISCRelease NotesVendor Advisory | |
| https://support.apple.com/en-us/HT213256 | x_refsource_MISCRelease NotesVendor Advisory | |
| https://support.apple.com/en-us/HT213257 | x_refsource_MISCRelease NotesVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published May 26, 2022
Updated Aug 3, 2024
Reserved Mar 8, 2022
Link CVE-2022-26697
CISA Vulnrichment
Updated n/a