CVE-2022-42809

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to unexpected app termination or arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
ApplemacOS>= unspecified, < 13

References

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-42818.8A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the CVE-2022-428105.5The issue was addressed with improved memory handling. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, tvOS 16.1, iOS 16.1 and iPadOS 1CVE-2022-428115.5An access issue was addressed with additional sandbox restrictions. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura CVE-2022-428139.8A certificate validation issue existed in the handling of WKWebView. This issue was addressed with improved validation. This issue is fixed CVE-2022-428145.5A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitive data.CVE-2022-428155.5This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to access user-sensitiveCVE-2022-428165.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected CVE-2022-428176.5A logic issue was addressed with improved state management. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16, watCVE-2022-428185.9This issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. A user in a privileged network position mayCVE-2022-428195.5An access issue was addressed with improved access restrictions. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS MontereyCVE-2022-42827.2A vulnerability was found in SpringBootCMS and classified as critical. Affected by this issue is some unknown functionality of the componentCVE-2022-428207.8A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16.1 and iPadOS 16, macOS Ventura 13. An
CVE-2022-42809: High severity, CVSS 7.8 | Vulnix