Memory Management Flaw in Apple Operating Systems
CVE-2022-43454

7.8HIGH

Key Information:

Vendor
Apple
Status
Mac OS
Watch OS
iOS And iPad OS
TV OS
Vendor
CVE Published:
10 March 2025

Summary

A flaw in memory management known as a double free issue has been identified in multiple Apple operating systems. This vulnerability could allow an application to exploit the issue and execute arbitrary code with kernel privileges. The risk is mitigated in the latest updates including macOS Ventura 13.1, watchOS 9.2, iOS 16.2, iPadOS 16.2, and tvOS 16.2. Users are encouraged to keep their systems updated to protect against potential exploits.

Affected Version(s)

iOS and iPadOS < 16.2

macOS < 13.1

tvOS < 16.2

References

https://support.apple.com/en-us/102808
https://support.apple.com/en-us/102741
https://support.apple.com/en-us/102807

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.