CVE-2022-43454

Katalog CVE

CVSS 7.8 · High EPSS 0,21%

Kerentanan Double Free pada apple ipados, apple iphone os +3 lainnya. Skor CVSS 3.1 7.8 (High) menurut CISA ADP.

Deskripsi (NVD)

A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges.

Rincian

Terbit di NVD

10 Maret 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/102741 release notes · advisory vendor
• https://support.apple.com/en-us/102807 release notes · advisory vendor
• https://support.apple.com/en-us/102808 release notes · advisory vendor
• https://support.apple.com/en-us/102836 release notes · advisory vendor