CVE-2022-22596
First published: Mon Mar 14 2022(Updated: )
A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.
Credit: an anonymous researcher sqrtpwn an anonymous researcher sqrtpwn product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPadOS | <15.4 | |
| Apple iPhone OS | <15.4 | |
| Apple watchOS | <8.5 | |
| Apple watchOS | <8.5 | 8.5 |
| Apple iOS | <15.4 | 15.4 |
| Apple iPadOS | <15.4 | 15.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT213182 (Advisory)
- https://support.apple.com/en-us/HT213193 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2022-22633
- CVE-2022-22666
- CVE-2022-22611
- CVE-2022-22612
- CVE-2022-22596
- CVE-2022-22640
- CVE-2022-22613
- CVE-2022-22614
- CVE-2022-22615
- CVE-2022-22632
- CVE-2022-22638
- CVE-2021-30946
- CVE-2021-36976
- CVE-2022-21658
- CVE-2022-22670
- CVE-2022-22618
- CVE-2022-22609
- CVE-2022-22654
- CVE-2022-22600
- CVE-2022-22599
- CVE-2022-22621
- CVE-2022-22662
- CVE-2022-22610
- CVE-2022-22624
- CVE-2022-22628
- CVE-2022-22629
- CVE-2022-22637
- CVE-2022-22634
- CVE-2022-22635
- CVE-2022-22636
- CVE-2022-22652
- CVE-2022-22598
- CVE-2022-22663
- CVE-2022-22642
- CVE-2022-22643
- CVE-2022-22667
- CVE-2022-22641
- CVE-2022-22653
- CVE-2022-22622
- CVE-2022-22672
- CVE-2022-22659
- CVE-2022-22655
- CVE-2022-22639
- CVE-2022-22671
- CVE-2022-22668
Frequently Asked Questions
What is CVE-2022-22596?
CVE-2022-22596 is a memory corruption issue in the Kernel that has been fixed with improved validation.
How does CVE-2022-22596 impact Apple watchOS, iOS, and iPadOS?
CVE-2022-22596 affects Apple watchOS up to version 8.5, Apple iOS up to version 15.4, and Apple iPadOS up to version 15.4.
What is the severity of CVE-2022-22596?
The severity of CVE-2022-22596 is not mentioned.
How can I fix CVE-2022-22596?
To fix CVE-2022-22596, ensure that you update to the latest version of Apple watchOS, iOS, or iPadOS as mentioned in the official Apple support links: [Apple watchOS](https://support.apple.com/en-us/HT213193), [Apple iOS](https://support.apple.com/en-us/HT213182).
Where can I find more information about CVE-2022-22596?
You can find more information about CVE-2022-22596 in the official Apple support links: [Apple watchOS](https://support.apple.com/en-us/HT213193), [Apple iOS](https://support.apple.com/en-us/HT213182).
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/references
- collector/apple-support
- alias/CVE-2022-22640
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple watchos
- canonical/apple ipados
- canonical/apple iphone os
- canonical/apple ios