A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.3, iOS 15.3 and iPadOS 15.3, watchOS 8.4, macOS Monterey 12.2. Processing a maliciously crafted file may lead to arbitrary code execution.
The product writes data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://support.apple.com/en-us/HT213053 | release notes vendor advisory |
https://support.apple.com/en-us/HT213054 | release notes vendor advisory |
https://support.apple.com/en-us/HT213057 | release notes vendor advisory |
https://support.apple.com/en-us/HT213059 | release notes vendor advisory |