Unscored CVE-2022-22666 EUVD-2022-27811GHSA-5c4g-wxx8-6c9r

A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. …

Published Mar 18, 2022 · Updated Aug 3, 2024 · Assigned by apple

Vendor: Apple Product: iOS and iPadOS Product: tvOS Product: watchOS Platform: iOS

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. Processing a maliciously crafted image may lead to heap corruption.

Affected products

Vendor	Product	Affected	Fixed
Apple	iOS and iPadOS	unspecified – < 15.4	15.4
Apple	tvOS	unspecified – < 15.4	15.4
Apple	watchOS	unspecified – < 8.5	8.5

References

https://support.apple.com/en-us/HT213182
https://support.apple.com/en-us/HT213193
https://support.apple.com/en-us/HT213186
http://packetstormsecurity.com/files/167144/AppleVideoDecoder-CreateHeaderBuffer-Out-Of-Bounds-Free.html