HIGH
An out-of-bounds write issue was addressed with improved bounds checking
Published May 26, 2022
7.8
HIGHCVSS 3.1
EPSS 1.19%
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<2022
- Version
-
- Version unspecifiedStatusaffectedConstraints<11.6
- Version unspecifiedStatusaffectedConstraints<12.4
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Apple | Security Update - Catalina | n/a |
| |||||||||
| Apple | macOS | n/a |
|
OR
- < 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- 10.15.7
- ≥ 11.0 · < 11.6.6
- ≥ 12.0 · < 12.4
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-31270 Advisory
- https://support.apple.com/en-us/HT213255 x_refsource_MISCVendor Advisory
- https://support.apple.com/en-us/HT213256 x_refsource_MISCVendor Advisory
- https://support.apple.com/en-us/HT213257 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-31270 | Advisory | |
| https://support.apple.com/en-us/HT213255 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/en-us/HT213256 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/en-us/HT213257 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published May 26, 2022
Updated Aug 3, 2024
Reserved Mar 8, 2022
Link CVE-2022-26720
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2022-31270 Assigner apple
Published May 26, 2022
Updated Aug 3, 2024
Exploited since n/a
Link EUVD-2022-31270