Unrated severityCISA KEVNVD Advisory· Published Aug 24, 2022· Updated Oct 21, 2025

CVE-2022-32894

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./macOSllm-fuzzy2 versions
<=12.5.1+ 1 more
- (no CPE)range: <=12.5.1
- (no CPE)range: unspecified
Apple Inc./Ipadosllm-fuzzy
Range: <=15.6.1
Apple Inc./iOSllm-fuzzy
Range: <=15.6.1
Apple Inc./iOS and iPadOScpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2022/Aug/16mitremailing-list
seclists.org/fulldisclosure/2022/Oct/45mitremailing-list
seclists.org/fulldisclosure/2022/Oct/49mitremailing-list
support.apple.com/en-us/HT213412mitre
support.apple.com/en-us/HT213413mitre
support.apple.com/kb/HT213443mitre
support.apple.com/kb/HT213486mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.120
patch	0.000
ransomware	0.000