CVE-2022-32844

Summary

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary kernel read and write capability may be able to bypass Pointer Authentication.

Affected Software

Weaknesses

• An app with arbitrary kernel read and write capability may be able to bypass Pointer Authentication

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213340
• https://support.apple.com/en-us/HT213342
• https://support.apple.com/en-us/HT213346

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://support.apple.com/en-us/HT213340
• https://support.apple.com/en-us/HT213342
• https://support.apple.com/en-us/HT213346

• ←Previous
• Next→