Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Processing a maliciously crafted image may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | watchOS | unspecified – < 8.3 | 8.3 |
| Apple | iOS and iPadOS | unspecified – < 15.2 | 15.2 |
| Apple | macOS | unspecified – < 12.1, unspecified – < 11.6, unspecified – < 15.2, unspecified – < 2021 | 12.1 |
Advisories 2
- WID-SEC-2026-0631 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2026
- WID-SEC-2022-0489 Apple iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 5, 2026
References
- https://support.apple.com/en-us/HT212975
- https://support.apple.com/en-us/HT212976
- https://support.apple.com/en-us/HT212978
- https://support.apple.com/en-us/HT212979
- https://support.apple.com/en-us/HT212981
- https://support.apple.com/en-us/HT212980
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1414
- https://www.zerodayinitiative.com/advisories/ZDI-22-359/