CVE-2022-46693: Input Validation

Reference Links

• https://support.apple.com/en-us/HT213538 (Advisory)
• https://support.apple.com/en-us/HT213535 (Advisory)
• http://seclists.org/fulldisclosure/2022/Dec/20
• http://seclists.org/fulldisclosure/2022/Dec/23
• http://seclists.org/fulldisclosure/2022/Dec/26
• https://support.apple.com/en-us/HT213530 (Advisory)
• https://support.apple.com/en-us/HT213532 (Advisory)
• https://support.apple.com/en-us/HT213536 (Advisory)
• https://support.apple.com/kb/HT213536
• http://seclists.org/fulldisclosure/2022/Dec/27

Parent vulnerabilities

(Appears in the following advisories)

• HT213538
• HT213535
• HT213536
• HT213532
• HT213530

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-46693
• CVE-2022-46692
• CVE-2022-46698
• CVE-2022-42843
• CVE-2022-46694
• CVE-2022-42865
• CVE-2022-42848
• CVE-2022-42851
• CVE-2022-42864
• CVE-2022-46690
• CVE-2022-42837
• CVE-2022-46689
• CVE-2022-46701
• CVE-2022-42842
• CVE-2022-42845
• CVE-2022-48618
• CVE-2022-40303
• CVE-2022-40304
• CVE-2022-42855
• CVE-2022-46695
• CVE-2022-42849
• CVE-2022-42866
• CVE-2022-46705
• CVE-2022-42867
• CVE-2022-46691
• CVE-2022-42852
• CVE-2022-46696
• CVE-2022-46700
• CVE-2022-46699
• CVE-2022-42863
• CVE-2022-42856
• CVE-2022-46717
• CVE-2022-42859
• CVE-2022-46703
• CVE-2022-42858
• CVE-2022-42847
• CVE-2022-42854
• CVE-2022-42853
• CVE-2022-35252
• CVE-2022-32942
• CVE-2022-46720
• CVE-2022-46710
• CVE-2022-46697
• CVE-2022-42861
• CVE-2022-42839
• CVE-2022-46716
• CVE-2022-46704
• CVE-2022-32943
• CVE-2022-42840
• CVE-2022-42862
• CVE-2022-24836
• CVE-2022-29181
• CVE-2022-46718
• CVE-2022-32919
• CVE-2022-46725
• CVE-2022-42841
• CVE-2022-46702
• CVE-2022-42850
• CVE-2022-42846
• CVE-2022-42844

Frequently Asked Questions

• What is CVE-2022-46693?

  CVE-2022-46693 is a vulnerability in ImageIO that allows for an out-of-bounds write due to improved input validation.

• Which software is affected by CVE-2022-46693?

  CVE-2022-46693 affects Apple iOS up to version 16.2, Apple iPadOS up to version 16.2, Apple macOS Ventura up to version 13.1, Apple tvOS up to version 16.2, Apple iCloud for Windows up to version 14.1, and Apple watchOS up to version 9.2.

• What is the severity of CVE-2022-46693?

  The severity of CVE-2022-46693 is not specified in the provided information.

• How can I fix CVE-2022-46693?

  To fix CVE-2022-46693, it is recommended to update to the latest version of the affected software provided by Apple.

• Where can I find more information about CVE-2022-46693?

  More information about CVE-2022-46693 can be found on the Apple support page: [https://support.apple.com/en-us/HT213530](https://support.apple.com/en-us/HT213530)