7.8
High
CVE-2022-46693 An out-of-bounds write issue was addressed with improved input validation
Description
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing a maliciously crafted file may lead to arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iCloud for Windows 14.1 | earliest → < 14.1 | 14.1 |
| tvOS 16.2 | earliest → < 16.2 | 16.2 |
| watchOS 9.2 | earliest → < 9.2 | 9.2 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 seclists.org
- 20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 seclists.org
- 20221220 APPLE-SA-2022-12-13-8 watchOS 9.2 seclists.org
Timeline
- Published
- Last modified
Other CVEs of iCloud for Windows
The 181 CVEs of iCloud for Windows →
CVE-2022-46698
A logic issue was addressed with improved checks
6.5
Medium
CVE-2022-46692
A logic issue was addressed with improved state management
5.5
Medium
CVE-2020-36521
An out-of-bounds read was addressed with improved input validation
7.1
High
CVE-2018-4302
A null pointer dereference was addressed with improved validation
Not rated