CVE-2022-42798

Summary

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, iOS 16.1 and iPadOS 16, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. Parsing a maliciously crafted audio file may lead to disclosure of user information.

Affected Software

VendorProductVersion RangeStatus
ApplemacOSunspecified < 13affected
AppletvOSunspecified < 16.1affected
AppletvOSunspecified < 11.7affected
AppletvOSunspecified < 16.1affected
AppletvOSunspecified < 12.6affected
AppletvOSunspecified < 15.7affected
ApplewatchOSunspecified < 9.1affected

Weaknesses

  • Parsing a maliciously crafted audio file may lead to disclosure of user information

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References