CVE-2022-48618: Apple Multiple Products Memory Corruption Vulnerability

Description

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

High

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 42% of CVEs

Exploited in the wildYes

CISA KEVListed Jan 31, 2024

Federal remediation dueFeb 21, 2024

Ransomware campaign useNot known

Affected products

Which versions

MA

macOS · Apple

before 13.1 · source: vendor, NVD, CISA

IO

iOS · Apple

before 16.2 · source: NVD, CISA

IA

iOS and iPadOS · Apple

before 16.2 · source: vendor

TV

tvOS · Apple

before 16.2 · source: vendor, NVD, CISA

WA

watchOS · Apple

before 9.2 · source: vendor, NVD, CISA

MP

Multiple Products · Apple

All versions, or not specified · source: KEV