CVE-2022-43454

A double free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2, tvOS 16.2. An app may be able to execute arbitrary code with kernel privileges.
References
Link Resource
https://support.apple.com/en-us/102741 Vendor Advisory Release Notes
https://support.apple.com/en-us/102807 Vendor Advisory Release Notes
https://support.apple.com/en-us/102808 Vendor Advisory Release Notes
https://support.apple.com/en-us/102836 Vendor Advisory Release Notes
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*

History

24 Mar 2025, 15:07

Type Values Removed Values Added
CPE cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
Summary
  • (es) Se solucionó un problema de doble liberación con una mejor gestión de la memoria. Este problema se solucionó en macOS Ventura 13.1, watchOS 9.2, iOS 16.2 y iPadOS 16.2, tvOS 16.2. Es posible que una aplicación pueda ejecutar código arbitrario con privilegios de kernel.
First Time Apple tvos
Apple iphone Os
Apple ipados
Apple watchos
Apple
Apple macos
References () https://support.apple.com/en-us/102741 - () https://support.apple.com/en-us/102741 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/102807 - () https://support.apple.com/en-us/102807 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/102808 - () https://support.apple.com/en-us/102808 - Vendor Advisory, Release Notes
References () https://support.apple.com/en-us/102836 - () https://support.apple.com/en-us/102836 - Vendor Advisory, Release Notes

11 Mar 2025, 03:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-415

10 Mar 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-10 20:15

Updated : 2025-03-24 15:07


NVD link : CVE-2022-43454

Mitre link : CVE-2022-43454

CVE.ORG link : CVE-2022-43454


JSON object : View

Products Affected

apple

  • iphone_os
  • watchos
  • tvos
  • macos
  • ipados
CWE
CWE-415

Double Free