Out-of-Bounds Read Vulnerability in Xcode by Apple
CVE-2022-22607

7.8HIGH

Key Information:

Vendor

Apple
Status
Xcode
Vendor
CVE Published:
18 March 2022

What is CVE-2022-22607?

An out-of-bounds read vulnerability in Xcode can be exploited through maliciously crafted files. This flaw can lead to unexpected application termination or enable the execution of arbitrary code, jeopardizing the integrity of user data and the security of the development environment. Apple has addressed this issue with enhanced bounds checking in Xcode 13.3 to prevent potential exploitation.

Affected Version(s)

Xcode < 13.3

References

https://support.apple.com/en-us/HT213189
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.