CVE-2022-48618

HighCVSS 7.0/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. Apple is aware of a report that this issue may have been exploited against versions of iOS released before iOS 15.7.1.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published
Jan 9, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Jan 31, 2024
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-486195.5An issue was discovered in drivers/input/input.c in the Linux kernel before 5.17.10. An attacker can cause a denial of service (panic) becauCVE-2022-48627.6Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the contentCVE-2022-486209.8uev (aka libuev) before 2.4.1 has a buffer overflow in epoll_wait if maxevents is a large number.CVE-2022-486217.5Vulnerability of missing authentication for critical functions in the Wi-Fi module.Successful exploitation of this vulnerability may affect CVE-2022-486227.8In GNOME GdkPixbuf (aka gdk-pixbuf) through 2.42.10, the ANI (Windows animated cursor) decoder encounters heap memory corruption (in ani_loaCVE-2022-486239.1The Cpanel::JSON::XS package before 4.33 for Perl performs out-of-bounds accesses in a way that allows attackers to obtain sensitive informaCVE-2022-486247.8close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.CVE-2022-486257.5Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.CVE-2022-486267.8In the Linux kernel, the following vulnerability has been resolved: moxart: fix potential use-after-free on remove path It was reported thCVE-2022-486275.5In the Linux kernel, the following vulnerability has been resolved: vt: fix memory overlapping when deleting chars in the buffer A memory CVE-2022-486285.5In the Linux kernel, the following vulnerability has been resolved: ceph: drop messages from MDS when unmounting When unmounting all the dCVE-2022-486295.5In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - ensure buffer for generate is completely filled The