CVE-2022-26751
Summary
| CVE | CVE-2022-26751 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-05-26 20:15:00 UTC |
| Updated | 2022-06-07 19:49:00 UTC |
| Description | A memory corruption issue was addressed with improved input validation. This issue is fixed in iTunes 12.12.4 for Windows, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6, macOS Monterey 12.4. Processing a maliciously crafted image may lead to arbitrary code execution. |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Operating System |
Apple |
Ipados |
All |
All |
All |
All |
| Operating System |
Apple |
Iphone Os |
All |
All |
All |
All |
| Application |
Apple |
Itunes |
All |
All |
All |
All |
| Operating System |
Apple |
Macos |
All |
All |
All |
All |
| Operating System |
Apple |
Mac Os X |
All |
All |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
- |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2020-001 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-001 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-002 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-003 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-004 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-005 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-006 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-007 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2021-008 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2022-001 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2022-002 |
All |
All |
| Operating System |
Apple |
Mac Os X |
10.15.7 |
security_update_2022-003 |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| About the security content of Security Update 2022-004 Catalina - Apple Support |
MISC |
support.apple.com |
|
| About the security content of iOS 15.5 and iPadOS 15.5 - Apple Support |
MISC |
support.apple.com |
|
| About the security content of macOS Big Sur 11.6.6 - Apple Support |
MISC |
support.apple.com |
|
| About the security content of macOS Monterey 12.4 - Apple Support |
MISC |
support.apple.com |
|
| About the security content of iTunes 12.12.4 for Windows - Apple Support |
MISC |
support.apple.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 376607 Apple macOS Security Update 2022-004 Catalina (HT213255)
- 376608 Apple MacOS Big Sur 11.6.6 Not Installed (HT213256)
- 376612 Apple macOS Monterey 12.4 Not Installed (HT213257)
- 376654 Apple iTunes for Windows Prior to 12.12.4 Vulnerabilities (HT213259)
- 610416 Apple iOS 15.5 and iPadOS 15.5 Security Update Missing (HT213258)