Description
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2, watchOS 9.2. Parsing a maliciously crafted video file may lead to kernel code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | tvOS | unspecified – < 16.2, unspecified – < 15.7 | 16.2 |
| Apple | watchOS | unspecified – < 9.2 | 9.2 |
Advisories 1
- WID-SEC-2022-2321 Apple iOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · Jul 3, 2024
References
- https://support.apple.com/en-us/HT213535
- https://support.apple.com/en-us/HT213530
- https://support.apple.com/en-us/HT213531
- https://support.apple.com/en-us/HT213536
- 20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-7 tvOS 16.2 mailing-list
- 20221220 APPLE-SA-2022-12-13-8 watchOS 9.2 mailing-list