vulnerability

OS X update for ImageIO (CVE-2022-46693)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Dec 15, 2022

Added

Jan 10, 2023

Modified

Mar 27, 2026

Description

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing a maliciously crafted file may lead to arbitrary code execution.

Solution

apple-osx-upgrade-latest

References

CVE-2022-46693
https://attackerkb.com/topics/CVE-2022-46693
CWE-787
EUVD-EUVD-2022-49482
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49482
https://support.apple.com/kb/HT213532

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report