Out-of-Bounds Read in Xcode from Apple
CVE-2022-22604

7.8HIGH

Key Information:

Vendor
Apple
Status
Xcode
Vendor
CVE Published:
18 March 2022

Summary

An out-of-bounds read vulnerability in Xcode was identified, allowing a maliciously crafted file to cause unexpected application termination or potentially allow arbitrary code execution. This issue has been mitigated in Xcode 13.3 through improved bounds checking protocols. Users are strongly advised to update to this version to protect against this security risk.

Affected Version(s)

Xcode < 13.3

References

https://support.apple.com/en-us/HT213189
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.