Out-of-bounds Read Vulnerability in Xcode by Apple
CVE-2022-22606

7.8HIGH

Key Information:

Vendor

Apple
Status
Xcode
Vendor
CVE Published:
18 March 2022

What is CVE-2022-22606?

An out-of-bounds read vulnerability was identified in Xcode, which could allow an attacker to manipulate file input in such a way that a maliciously crafted file triggers unexpected application termination or even permits arbitrary code execution. To mitigate this issue, the client has implemented enhanced bounds checking in Xcode version 13.3.

Affected Version(s)

Xcode < 13.3

References

https://support.apple.com/en-us/HT213189
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.