First published: Mon Mar 14 2022(Updated: )
A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
Credit: an anonymous researcher an anonymous researcher product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPadOS | <15.4 | |
Apple iPhone OS | <15.4 | |
Apple tvOS | <15.4 | |
Apple tvOS | <15.4 | 15.4 |
Apple iOS | <15.4 | 15.4 |
Apple iPadOS | <15.4 | 15.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-22634 is a vulnerability in AVEVideoEncoder that allows a buffer overflow, which has been fixed with improved bounds checking.
CVE-2022-22634 affects Apple iOS, iPadOS, and tvOS versions up to, but not including, 15.4.
CVE-2022-22634 is a vulnerability with a severity of 7.8 out of 10 (High).
To mitigate CVE-2022-22634, users should update their Apple devices to iOS, iPadOS, and tvOS version 15.4.
More information about CVE-2022-22634 can be found on the Apple support page: [CVE-2022-22634](https://support.apple.com/en-us/HT213186)