CVE-2022-42844

Опубликовано: 15 дек. 2022

Источник: nvd

CVSS3: 8.6

EPSS Низкий

Описание

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to break out of its sandbox.

Ссылки

http://seclists.org/fulldisclosure/2022/Dec/20
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT213530
Release Notes
Vendor Advisory
http://seclists.org/fulldisclosure/2022/Dec/20
Mailing List
Third Party Advisory
https://support.apple.com/en-us/HT213530
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*

Версия до 16.2 (исключая)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Версия до 16.2 (исключая)

EPSS

Процентиль: 39%

0.00172

Низкий

8.6 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-119

Связанные уязвимости

GHSA-j58x-47c8-gq4h