CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution.

• CWE-125

• https://support.apple.com/en-us/HT213182Vendor Advisory
• https://support.apple.com/en-us/HT213183Vendor Advisory
• https://support.apple.com/en-us/HT213186Vendor Advisory
• https://support.apple.com/en-us/HT213188Vendor Advisory
• https://support.apple.com/en-us/HT213193Vendor Advisory
• https://support.apple.com/en-us/HT213182Vendor Advisory
• https://support.apple.com/en-us/HT213183Vendor Advisory
• https://support.apple.com/en-us/HT213186Vendor Advisory
• https://support.apple.com/en-us/HT213188Vendor Advisory
• https://support.apple.com/en-us/HT213193Vendor Advisory

Published

Mar 18, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22606An out-of-bounds read was addressed with improved bounds che…7.8
• CVE-2022-22607An out-of-bounds read was addressed with improved bounds che…7.8
• CVE-2022-22608An out-of-bounds read was addressed with improved bounds che…7.8
• CVE-2022-22609The issue was addressed with additional permissions checks. …7.5
• CVE-2022-2261The WPIDE WordPress plugin before 3.0 does not sanitize and …7.2
• CVE-2022-22610A memory corruption issue was addressed with improved state …8.8
• CVE-2022-22612A memory consumption issue was addressed with improved memor…7.8
• CVE-2022-22613An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2022-22614A use after free issue was addressed with improved memory ma…7.8
• CVE-2022-22615A use after free issue was addressed with improved memory ma…7.8
• CVE-2022-22616This issue was addressed with improved checks. This issue is…5.5
• CVE-2022-22617A logic issue was addressed with improved state management. …7.8