CVE-2022-42805

HIGH 7.8EPSS 0.3%

An integer overflow was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.

CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 0.33% chance of exploitation in the next 30 days, 25th percentile
Published: 2022-12-15
Updated: 2025-04-21

Proof-of-concept exploits (3)

0x36/weightBufs306★ · 2022-11-20
DRACULA-HACK/test0★ · 2024-05-01
zara-memon66/exploit-for-iOS-15_macOS-120★ · 2024-08-16

References

Related