{"id":"CVE-2022-46690","state":"PUBLISHED","title":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may b","description":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.","publishedAt":"2022-12-15T00:00:00.000Z","updatedAt":"2025-04-21T14:06:38.032Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"apple","products":["Apple tvOS","Apple watchOS"],"affected":[{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.1","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.2","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.2","versionType":"custom"}]}],"references":["https://support.apple.com/en-us/HT213535","https://support.apple.com/en-us/HT213532","https://support.apple.com/en-us/HT213530","https://support.apple.com/en-us/HT213536","http://seclists.org/fulldisclosure/2022/Dec/20","http://seclists.org/fulldisclosure/2022/Dec/23","http://seclists.org/fulldisclosure/2022/Dec/26","http://seclists.org/fulldisclosure/2022/Dec/27"],"weaknesses":["CWE-787"],"ingestedAt":"2026-10-29T19:50:53.608Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/46xxx/CVE-2022-46690.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-46690","state":"PUBLISHED","datePublished":"2022-12-15T00:00:00.000Z","dateUpdated":"2025-04-21T14:06:38.032Z","assignerShortName":"apple","assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateReserved":"2022-12-07T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges."}],"affected":[{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.2","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"13.1","versionType":"custom"}]},{"vendor":"Apple","product":"tvOS","versions":[{"version":"unspecified","status":"affected","lessThan":"16.2","versionType":"custom"}]},{"vendor":"Apple","product":"watchOS","versions":[{"version":"unspecified","status":"affected","lessThan":"9.2","versionType":"custom"}]}],"references":[{"url":"https://support.apple.com/en-us/HT213535"},{"url":"https://support.apple.com/en-us/HT213532"},{"url":"https://support.apple.com/en-us/HT213530"},{"url":"https://support.apple.com/en-us/HT213536"},{"url":"http://seclists.org/fulldisclosure/2022/Dec/20","name":"20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/23","name":"20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/26","name":"20221220 APPLE-SA-2022-12-13-7 tvOS 16.2","tags":["mailing-list"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/27","name":"20221220 APPLE-SA-2022-12-13-8 watchOS 9.2","tags":["mailing-list"]}],"problemTypes":[{"descriptions":[{"type":"text","lang":"en","description":"An app may be able to execute arbitrary code with kernel privileges"}]}],"providerMetadata":{"shortName":"apple","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","dateUpdated":"2022-12-21T00:00:00.000Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.apple.com/en-us/HT213535","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213532","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213530","tags":["x_transferred"]},{"url":"https://support.apple.com/en-us/HT213536","tags":["x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/20","name":"20221220 APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/23","name":"20221220 APPLE-SA-2022-12-13-4 macOS Ventura 13.1","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/26","name":"20221220 APPLE-SA-2022-12-13-7 tvOS 16.2","tags":["mailing-list","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2022/Dec/27","name":"20221220 APPLE-SA-2022-12-13-8 watchOS 9.2","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T14:39:38.471Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.8,"attackVector":"LOCAL","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"REQUIRED","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-21T14:05:32.457619Z","id":"CVE-2022-46690","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","type":"CWE","lang":"en","description":"CWE-787 Out-of-bounds Write"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-21T14:06:38.032Z"}}]}}}