CVE-2022-26711

EUVD-2022-31261
An integer overflow issue was addressed with improved input validation. This issue is fixed in tvOS 15.5, iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, watchOS 8.6, macOS Monterey 12.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Affected Products (NVD)
VendorProductVersion
appleitunes
𝑥
< 12.12.4
appleipados
𝑥
< 15.5
appleiphone_os
𝑥
< 15.5
applemacos
12.0.0 ≤
𝑥
< 12.4
appletvos
𝑥
< 15.5
applewatchos
𝑥
< 8.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/en-us/HT213253
https://support.apple.com/en-us/HT213254
https://support.apple.com/en-us/HT213257
https://support.apple.com/en-us/HT213258
https://support.apple.com/en-us/HT213259
https://support.apple.com/en-us/HT213253
https://support.apple.com/en-us/HT213254
https://support.apple.com/en-us/HT213257
https://support.apple.com/en-us/HT213258
https://support.apple.com/en-us/HT213259