CVE-2022-26730

Summary

A memory corruption issue existed in the processing of ICC profiles. This issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
ApplemacOSunspecified < 13affected

Weaknesses

  • Processing a maliciously crafted image may lead to arbitrary code execution

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References