First published: Tue Mar 08 2022(Updated: )
ImageIO. An out-of-bounds read was addressed with improved input validation.
Credit: Xingyu Jin GoogleXingyu Jin GoogleXingyu Jin GoogleXingyu Jin GoogleXingyu Jin Google product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iTunes for Windows | <12.12.3 | 12.12.3 |
Apple macOS Monterey | <12.3 | 12.3 |
Apple watchOS | <8.5 | 8.5 |
Apple tvOS | <15.4 | 15.4 |
Apple iOS | <15.4 | 15.4 |
Apple iPadOS | <15.4 | 15.4 |
Apple Itunes Windows | <12.12.3 | |
Apple iPadOS | <15.4 | |
Apple iPhone OS | <15.4 | |
Apple macOS | >=12.0<12.3 | |
Apple tvOS | <15.4 | |
Apple watchOS | <8.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-22611 is a vulnerability in ImageIO that allows for an out-of-bounds read.
The severity of CVE-2022-22611 is not specified.
iTunes for Windows version up to and including 12.12.3, watchOS version up to and including 8.5, iOS version up to and including 15.4, iPadOS version up to and including 15.4, tvOS version up to and including 15.4, and macOS Monterey version up to and including 12.3 are affected by CVE-2022-22611.
To fix CVE-2022-22611, update to the latest version of the affected software.
You can find more information about CVE-2022-22611 at the following references: [Reference 1](https://support.apple.com/en-us/HT213186), [Reference 2](https://support.apple.com/en-us/HT213193), [Reference 3](https://support.apple.com/en-us/HT213188).