ByteOS Network

CVE Vulnerability Details :

CVE-2022-42845

PUBLISHED

More Info Official Page

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-15 Dec, 2022 | 00:00

Updated At-21 Apr, 2025 | 15:11

▼CVE Numbering Authority (CNA)

The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app with root privileges may be able to execute arbitrary code with kernel privileges.

Affected Products

Vendor

Apple Inc.

Product

macOS

Versions

Affected

From unspecified before 11.7 (custom)

Vendor

Apple Inc.

Product

tvOS

Versions

Affected

From unspecified before 16.2 (custom)

Vendor

Apple Inc.

Product

tvOS

Versions

Affected

From unspecified before 13.1 (custom)

Vendor

Apple Inc.

Product

tvOS

Versions

Affected

From unspecified before 12.6 (custom)

Vendor

Apple Inc.

Product

tvOS

Versions

Affected

From unspecified before 16.2 (custom)

Vendor

Apple Inc.

Product

watchOS

Versions

Affected

From unspecified before 9.2 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	An app with root privileges may be able to execute arbitrary code with kernel privileges

Type: text

CWE ID: N/A

Description: An app with root privileges may be able to execute arbitrary code with kernel privileges

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213535	N/A
https://support.apple.com/en-us/HT213532	N/A
https://support.apple.com/en-us/HT213530	N/A
https://support.apple.com/en-us/HT213536	N/A
https://support.apple.com/en-us/HT213534	N/A
https://support.apple.com/en-us/HT213533	N/A
http://seclists.org/fulldisclosure/2022/Dec/20	mailing-list
http://seclists.org/fulldisclosure/2022/Dec/25	mailing-list
http://seclists.org/fulldisclosure/2022/Dec/23	mailing-list
http://seclists.org/fulldisclosure/2022/Dec/26	mailing-list
http://seclists.org/fulldisclosure/2022/Dec/24	mailing-list
http://seclists.org/fulldisclosure/2022/Dec/27	mailing-list

Hyperlink: https://support.apple.com/en-us/HT213535

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213532

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213530

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213536

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213534

Resource: N/A

Hyperlink: https://support.apple.com/en-us/HT213533

Resource: N/A

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/20

Resource:

mailing-list

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/25

Resource:

mailing-list

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/23

Resource:

mailing-list

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/26

Resource:

mailing-list

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/24

Resource:

mailing-list

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/27

Resource:

mailing-list

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/en-us/HT213535	x_transferred
https://support.apple.com/en-us/HT213532	x_transferred
https://support.apple.com/en-us/HT213530	x_transferred
https://support.apple.com/en-us/HT213536	x_transferred
https://support.apple.com/en-us/HT213534	x_transferred
https://support.apple.com/en-us/HT213533	x_transferred
http://seclists.org/fulldisclosure/2022/Dec/20	mailing-list x_transferred
http://seclists.org/fulldisclosure/2022/Dec/25	mailing-list x_transferred
http://seclists.org/fulldisclosure/2022/Dec/23	mailing-list x_transferred
http://seclists.org/fulldisclosure/2022/Dec/26	mailing-list x_transferred
http://seclists.org/fulldisclosure/2022/Dec/24	mailing-list x_transferred
http://seclists.org/fulldisclosure/2022/Dec/27	mailing-list x_transferred

Hyperlink: https://support.apple.com/en-us/HT213535

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213532

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213530

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213536

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213534

Resource:

x_transferred

Hyperlink: https://support.apple.com/en-us/HT213533

Resource:

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/20

Resource:

mailing-list

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/25

Resource:

mailing-list

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/23

Resource:

mailing-list

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/26

Resource:

mailing-list

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/24

Resource:

mailing-list

x_transferred

Hyperlink: http://seclists.org/fulldisclosure/2022/Dec/27

Resource:

mailing-list

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-787	CWE-787 Out-of-bounds Write

Type: CWE

CWE ID: CWE-787

Description: CWE-787 Out-of-bounds Write

Metrics

Version	Base score	Base severity	Vector
3.1	7.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected Products

Affected

Affected

Affected

Affected

Affected

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References