The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13. Processing a maliciously crafted USD file may disclose memory contents.

The version of Apple iOS running on the mobile device is prior to 15.7.1. It is, therefore, affected by multiple vulnerabilities.

According to its banner, the version of Apple TV on the remote device is prior to 16.1. It is therefore affected by multiple vulnerabilities as described in the HT213492:

  - Processing maliciously crafted web content may disclose internal states of the app (CVE-2022-32923)   
  - An app may be able to execute arbitrary code with kernel privileges (CVE-2022-32924)   
  - An app with root privileges may be able to execute arbitrary code with kernel privileges (CVE-2022-32926)     Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version   number.

The version of Apple iOS running on the mobile device is prior to 16.1. It is, therefore, affected by multiple vulnerabilities.

ID	Name	Product	Family	Type	Severity
189406	Apple iOS < 15.7.1 Multiple Vulnerabilities (HT213490)	Nessus	Mobile Devices	Local	critical
166680	Apple TV < 16.1 Multiple Vulnerabilities (HT213492)	Nessus	Misc.	Remote	critical
166598	Apple iOS < 16.1 Multiple Vulnerabilities (HT213489)	Nessus	Mobile Devices	Local	critical

Detections

Analytics

CVE-2022-42810

medium

Tenable Plugins

critical

critical

critical