CVE-2022-42827

Published: Nov 1, 2022Modified: Oct 23, 2025CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited..

Affected (3)

Products: Apple: Ipados, Iphone Os

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.7.1
Apple Iphone Os	Before 15.7.1
Apple Iphone Os	From 16.0 to 16.1

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (5)

https://support.apple.com/en-us/HT213489

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213490

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT213489

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT213490

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-42827

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.