VULNERABILITY INTELLIGENCE

CVE-2022-32916

CVSS score5.5 MEDIUM

EPSS probability0.24%

CISA KEVNot currently listed

Published2022-12-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 16. An app may be able to disclose kernel memory.

Weakness classification

nvd@nist.gov: CWE-125
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125

Primary references

product-security@apple.com — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory