Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-42837

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 an

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

An issue existed in the parsing of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, watchOS 9.2. A remote user may be able to cause unexpected app termination or arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple macOS

  • unspecified to < 13.1affected

Apple macOS

  • unspecified to < 16.2affected

Apple macOS

  • unspecified to < 15.7affected

Apple watchOS

  • unspecified to < 9.2affected

References