CVE-2022-26711

critical

Description

An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

References

https://support.apple.com/en-us/HT213259

https://support.apple.com/en-us/HT213258

https://support.apple.com/en-us/HT213257

https://support.apple.com/en-us/HT213254

https://support.apple.com/en-us/HT213253

Details

Source: Mitre, NVD

Published: 2022-05-26

Updated: 2022-06-07

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.0151