CVE-2022-32945

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

An access issue was addressed with additional sandbox restrictions on third-party apps. This issue is fixed in macOS Ventura 13. An app may be able to record audio with paired AirPods.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
Apple	macOS	>= unspecified, < 13

References

https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213489Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213488Release Notes, Vendor Advisory
https://support.apple.com/kb/HT213489Release Notes, Vendor Advisory

Timeline

Published: Dec 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-329465.5This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using CVE-2022-329477.8The issue was addressed with improved memory handling. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app CVE-2022-329487.8An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An CVE-2022-329497.8This issue was addressed with improved checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16. An app may be able to execute a CVE-2022-32957.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.CVE-2022-329537.0An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by SMM and non-SMM code CVE-2022-329547.0An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by SMM and non-SMM code CVE-2022-329557.0An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM cod CVE-2022-329586.5A remote attacker with general user privilege can send a message to Teamplus Pro’s chat group that exceeds message size limit, to terminate CVE-2022-329596.8HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insuffi CVE-2022-32967.8Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0577.CVE-2022-329606.8HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insuffi