Description (CNA)
A certificate parsing issue was addressed with improved checks. This issue is fixed in tvOS 15.5, iOS 15.5 and iPadOS 15.5, Security Update 2022-004 Catalina, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.4. A malicious app may be able to bypass signature validation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / watchOS | affected unspecified before 8.6 |
| Apple / watchOS | affected unspecified before 15.5 |
| Apple / watchOS | affected unspecified before 2022 |
| Apple / watchOS | affected unspecified before 11.6 |
| Apple / watchOS | affected unspecified before 12.4 |
| Apple / watchOS | affected unspecified before 15.5 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/en-us/HT213255
- https://support.apple.com/en-us/HT213256
- https://support.apple.com/en-us/HT213258
- https://support.apple.com/en-us/HT213253
- https://support.apple.com/en-us/HT213254
- https://support.apple.com/en-us/HT213257
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.