Medium · 5.3 CVE-2022-32943 EUVD-2022-36009GHSA-h72x-r663-chxx

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may…

Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by apple

Vendor: Apple Product: macOS Platform: macOS

Description

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication.

Affected products

Vendor	Product	Affected	Fixed
Apple	macOS	unspecified – < 13.1, unspecified – < 16.2	13.1

Advisories 2

WID-SEC-2022-2321 Apple iOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jul 3, 2024
WID-SEC-2022-2313 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 31, 2024

References

https://support.apple.com/en-us/HT213532
https://support.apple.com/en-us/HT213530
20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 mailing-list
20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1 mailing-list

EUVD	v3.1	5.3
CISA-ADP	v3.1	5.3