CVE-2022-42827: Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
First published: Mon Oct 24 2022(Updated: )
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..
Credit: product-security@apple.com an anonymous researcher an anonymous researcher product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iOS | <16.1 | 16.1 |
| Apple iPadOS | <16 | 16 |
| Apple iOS | <15.7.1 | 15.7.1 |
| Apple iPadOS | <15.7.1 | 15.7.1 |
| Apple iPadOS | <15.7.1 | |
| Apple iPhone OS | <15.7.1 | |
| Apple iPhone OS | =16.0 | |
| Apple macOS | <12.6.1 | |
| Apple tvOS | <16.1 | |
| Apple watchOS | <9.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
- CVE-2022-32932
- CVE-2022-42825
- CVE-2022-32909
- CVE-2022-42798
- CVE-2022-32940
- CVE-2022-32929
- CVE-2022-42813
- CVE-2022-32945
- CVE-2022-32946
- CVE-2022-32935
- CVE-2022-32947
- CVE-2022-32939
- CVE-2022-42820
- CVE-2022-42806
- CVE-2022-46712
- CVE-2022-32944
- CVE-2022-42803
- CVE-2022-32926
- CVE-2022-42801
- CVE-2022-32924
- CVE-2022-42808
- CVE-2022-42827
- CVE-2022-42810
- CVE-2022-46715
- CVE-2022-42828
- CVE-2022-32941
- CVE-2022-42829
- CVE-2022-42830
- CVE-2022-42831
- CVE-2022-42832
- CVE-2022-42817
- CVE-2022-42811
- CVE-2022-32938
- CVE-2022-42792
- CVE-2022-42826
- CVE-2022-42799
- CVE-2022-42823
- CVE-2022-42824
- CVE-2022-32922
- CVE-2022-32923
- CVE-2022-32927
- CVE-2022-37434
- CVE-2022-42800
- CVE-2022-32949
Frequently Asked Questions
What is CVE-2022-42827?
CVE-2022-42827 is an out-of-bounds write vulnerability in Apple iOS and iPadOS kernel.
What can an application do with CVE-2022-42827?
An application can perform code execution with kernel privileges using CVE-2022-42827.
Which software versions are affected by CVE-2022-42827?
Apple iOS versions up to, but not including, 16.1 and Apple iPadOS versions up to, but not including, 16 are affected by CVE-2022-42827.
How can I fix CVE-2022-42827?
Update your Apple iOS to version 16.1 or later, or update your Apple iPadOS to version 16 or later.
- agent/type
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/severity
- agent/title
- agent/weakness
- agent/author
- agent/softwarecombine
- collector/apple-support
- source/Apple
- agent/software-canonical-lookup
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/apple
- canonical/apple ipados
- canonical/apple iphone os
- version/apple iphone os/16.0
- canonical/apple macos
- canonical/apple tvos
- canonical/apple watchos
- canonical/apple ios
- canonical/apple ios and ipados