First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-22635

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to gain elevated privileges.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Apple	iOS and iPadOS	>= unspecified, < 15.4
Apple	tvOS	>= unspecified, < 15.4

References

https://support.apple.com/en-us/HT213182Vendor Advisory
https://support.apple.com/en-us/HT213186Vendor Advisory
https://support.apple.com/en-us/HT213182Vendor Advisory
https://support.apple.com/en-us/HT213186Vendor Advisory

Timeline

Published: Mar 18, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-226367.8An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An app CVE-2022-226378.8A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iOS 15.4 a CVE-2022-226386.5A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur CVE-2022-226397.8A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An applica CVE-2022-22647.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.CVE-2022-226407.8A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey CVE-2022-226419.8A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Mont CVE-2022-226429.8This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency S CVE-2022-226437.5This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A user may send audio a CVE-2022-226445.5A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Mo CVE-2022-226465.5This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Monterey 12.2. A malicious application may be able to CVE-2022-226474.6This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Ca