CVE-2022-22585

Description

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files.

References

https://support.apple.com/en-us/103177

https://support.apple.com/en-us/103175

https://support.apple.com/en-us/103173

https://support.apple.com/en-us/103172

https://support.apple.com/en-us/102848

https://support.apple.com/en-us/HT213059

https://support.apple.com/en-us/HT213057

https://support.apple.com/en-us/HT213055

https://support.apple.com/en-us/HT213054

https://support.apple.com/en-us/HT213053

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3