CVE-2022-32943

Summary

The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Shake-to-undo may allow a deleted photo to be re-surfaced without authentication.

Affected Software

Weaknesses

• Shake-to-undo may allow a deleted photo to be re-surfaced without authentication

ADP Enrichment

CVE Program Container

Additional References

• https://support.apple.com/en-us/HT213532
• https://support.apple.com/en-us/HT213530
• http://seclists.org/fulldisclosure/2022/Dec/20
• http://seclists.org/fulldisclosure/2022/Dec/23

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://support.apple.com/en-us/HT213532
• https://support.apple.com/en-us/HT213530
• http://seclists.org/fulldisclosure/2022/Dec/20
• http://seclists.org/fulldisclosure/2022/Dec/23

• ←Previous
• Next→