SB2022102815 - Multiple vulnerabilities in Apple watchOS
Published: October 28, 2022 Updated: June 12, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 31 secuirty vulnerabilities.
1) Information disclosure (CVE-ID: CVE-2022-32883)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to a logic issue in the Maps component. A remote attacker can gain unauthorized access to sensitive location information.
2) Out-of-bounds write (CVE-ID: CVE-2022-32925)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Wi-Fi subsystem. A local application can trigger an out-of-bounds write and execute arbitrary code with kernel privileges.
3) Out-of-bounds write (CVE-ID: CVE-2022-32893)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error in WebKit when processing HTML content. A remote attacker can create a specially crafted website, trick the victim into opening it, trigger an out-of-bounds write and execute arbitrary code on the target system.
Note, the vulnerability is being actively exploited in the wild.
4) Spoofing attack (CVE-ID: CVE-2022-32891)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of frames on the webpage within WebKit. A remote attacker can spoof page content.
5) Out-of-bounds read (CVE-ID: CVE-2022-32912)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it using the affected software, trigger out-of-bounds read and execute arbitrary code on the target system.
6) Out-of-bounds write (CVE-ID: CVE-2022-32888)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing HTML content in WebKit. A remote attacker can create a specially crafted web page, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.
7) Buffer overflow (CVE-ID: CVE-2022-32886)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing web content in WebKit. A remote attacker can create a specially crafted website, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
8) Information disclosure (CVE-ID: CVE-2022-32875)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output in the Weather app. A local application can gain unauthorized access to location information.
9) Buffer overflow (CVE-ID: CVE-2021-36690)
The vulnerability allows a local user to perform a denial of service attack.
The vulnerability exists due to a segmentation fault in the sqlite3 command-line component when processing SQL queries in the idxGetTableInfo() function. A local user can pass a specially crafted SQL query and crash the application.
10) Security features bypass (CVE-ID: CVE-2022-32870)
The vulnerability allows an attacker to gain access to sensitive information.
The
vulnerability exists due to a logic issue in Siri. An attacker
with physical access to device can obtain certain call history information.
11) Security features bypass (CVE-ID: CVE-2022-32881)
The vulnerability allows a local application to bypass implemented security restrictions.
The vulnerability exists due to improperly imposed security restrictions in Sandbox. A local application can modify protected parts of the filesystem.12) Information disclosure (CVE-ID: CVE-2022-32879)
The vulnerability allows an attacker to gain access to potentially sensitive information.
The vulnerability exists due to improper state management in Notifications. An attacker with physical access to device can access contacts from the lock screen.
13) Buffer overflow (CVE-ID: CVE-2022-32908)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in MediaLibrary. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
14) Out-of-bounds write (CVE-ID: CVE-2022-32894)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the OS kernel component. A local application can trigger an out-of-bounds write error and execute arbitrary code on the system with kernel privileges.
Note, the vulnerability is being actively exploited in the wild.
15) Buffer overflow (CVE-ID: CVE-2022-42795)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in Accelerate Framework. A remote attacker can create a specially crafted image file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
16) Use-after-free (CVE-ID: CVE-2022-32914)
The vulnerability allows a local application to escalate privileges on the system.
17) Buffer overflow (CVE-ID: CVE-2022-32911)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the OS kernel. A local application can trigger memory corruption and execute arbitrary code with elevated privileges.
18) Buffer overflow (CVE-ID: CVE-2022-32866)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the OS kernel. A local application can trigger memory corruption and execute arbitrary code with elevated privileges.
19) Out-of-bounds read (CVE-ID: CVE-2022-32864)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the OS kernel. A local application can trigger an out-of-bounds read error and read kernel memory.
20) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2022-32913)
The vulnerability allows a local application to gain access to sensitive information.
The vulnerability exists due to improperly imposed security restrictions within the Image Processing subsystem. A local sandboxed application can determine, which app is currently using the camera.
21) Out-of-bounds read (CVE-ID: CVE-2022-1622)
The vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to a boundary condition in LZWDecode() function in libtiff/tif_lzw.c:619. A remote attacker can create a specially crafted TIFF file, trick the victim into opening it, trigger out-of-bounds read error and to perform a denial of service attack.
22) Use-after-free (CVE-ID: CVE-2022-32903)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in GPU Drivers. A local application can trigger a use-after-free error and execute arbitrary code with kernel privileges.
23) Man-in-the-Middle (MitM) attack (CVE-ID: CVE-2022-32928)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to a logic error within the Exchange app. A remote attacker on the local network can intercept mail credentials.
24) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2022-32854)
The vulnerability allows a local application to bypass implemented security restrictions.
The vulnerability exists due to improperly imposed security restrictions within the Contacts app. A local application can bypass Privacy preferences.
25) Buffer overflow (CVE-ID: CVE-2022-32899)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Apple Neural Engine. A local application can trigger memory corruption and execute arbitrary code with kernel privileges.
26) Buffer overflow (CVE-ID: CVE-2022-32898)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Apple Neural Engine. A local application can trigger memory corruption and execute arbitrary code with kernel privileges.
27) Out-of-bounds read (CVE-ID: CVE-2022-32858)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the Apple Neural Engine. A local application can trigger an out-of-bounds read error and read sensitive kernel state.
28) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2022-32907)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to improperly imposed security restrictions in AppleAVD. A local application can execute arbitrary code with kernel privileges.
29) Buffer overflow (CVE-ID: CVE-2022-32889)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Apple Neural Engine. A local application can trigger memory corruption and execute arbitrary code with kernel privileges.30) Information disclosure (CVE-ID: CVE-2022-32835)
The vulnerability allows a local application to gain access to potentially sensitive information.
The vulnerability exists due to an error in Watch app. A local application can obtain a persistent device identifier.
31) Buffer overflow (CVE-ID: CVE-2022-46709)
The vulnerability allows a local application to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Wi-Fi component. A local application can trigger memory corruption and execute arbitrary code with kernel privileges.
Remediation
Install update from vendor's website.