Description
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2, watchOS 9.2. Parsing a maliciously crafted video file may lead to kernel code execution.
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Apple | tvOS | >= unspecified, < 16.2 |
| Apple | tvOS | >= unspecified, < 16.2 |
| Apple | tvOS | >= unspecified, < 15.7 |
| Apple | watchOS | >= unspecified, < 9.2 |
References
- http://seclists.org/fulldisclosure/2022/Dec/20Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/21Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/26Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/27
- https://support.apple.com/en-us/HT213530Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213531Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213535Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213536Release Notes, Vendor Advisory
- http://seclists.org/fulldisclosure/2022/Dec/20Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/21Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/26Mailing List, Third Party Advisory
- http://seclists.org/fulldisclosure/2022/Dec/27
- https://support.apple.com/en-us/HT213530Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213531Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213535Release Notes, Vendor Advisory
- https://support.apple.com/en-us/HT213536Release Notes, Vendor Advisory
Timeline
- Published
- Dec 15, 2022
- Last modified
- Jun 17, 2026
- NVD status
- Modified