CVE Vulnerabilities

CVE-2022-22579

Published: Mar 18, 2022 | Modified: Aug 08, 2023
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution.

Affected Software

Name Vendor Start Version End Version
Ipados Apple * 15.3 (excluding)
Iphone_os Apple * 15.3 (excluding)
Mac_os_x Apple * 10.15.7 (excluding)
Mac_os_x Apple 10.15.7 (including) 10.15.7 (including)
Mac_os_x Apple 10.15.7-security_update_2020 (including) 10.15.7-security_update_2020 (including)
Mac_os_x Apple 10.15.7-security_update_2020-001 (including) 10.15.7-security_update_2020-001 (including)
Mac_os_x Apple 10.15.7-security_update_2020-005 (including) 10.15.7-security_update_2020-005 (including)
Mac_os_x Apple 10.15.7-security_update_2020-007 (including) 10.15.7-security_update_2020-007 (including)
Mac_os_x Apple 10.15.7-security_update_2021-001 (including) 10.15.7-security_update_2021-001 (including)
Mac_os_x Apple 10.15.7-security_update_2021-002 (including) 10.15.7-security_update_2021-002 (including)
Mac_os_x Apple 10.15.7-security_update_2021-003 (including) 10.15.7-security_update_2021-003 (including)
Mac_os_x Apple 10.15.7-security_update_2021-006 (including) 10.15.7-security_update_2021-006 (including)
Mac_os_x Apple 10.15.7-security_update_2021-007 (including) 10.15.7-security_update_2021-007 (including)
Mac_os_x Apple 10.15.7-security_update_2021-008 (including) 10.15.7-security_update_2021-008 (including)
Mac_os_x Apple 10.15.7-supplemental_update (including) 10.15.7-supplemental_update (including)
Macos Apple * 11.6.3 (excluding)
Macos Apple 12.0.0 (including) 12.2 (excluding)
Tvos Apple * 15.3 (excluding)

References