HIGH

CVE-2022-42827

Apple Ipados 2022-11-01 CVSS v3.1

CVSS

7.8

KEV

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Summary dbcve.org

This is a kernel-level out-of-bounds write vulnerability in iOS and iPadOS that allows a malicious application to write data outside allocated memory bounds, achieving kernel privileges and arbitrary code execution. Apple has confirmed this vulnerability was actively exploited in the wild as a zero-day before the patch.

Mitigation

Apply iOS 15.7.1 or iOS 16.1 (or later) updates to affected devices immediately. Prioritize patching given confirmed active exploitation.

Weakness (CWE)

CWE-787 Out-of-bounds Write

EPSS Score

1.05%

Probability of exploitation in next 30 days

62.8th percentile

References

https://support.apple.com/en-us/HT213489 Vendor Advisory https://support.apple.com/en-us/HT213490 Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42827 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE