CVE-2022-26697

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

Score

CVSS 3.1 7.1 High

Status

Modified - product-security@apple.com

Published

2022-05-26

Last modified

2024-08-03

Weaknesses

CWE-125

Affected products

• Mac Os X (Apple)
• Macos (Apple)
• Security Update - Catalina (Apple)

References

• https://support.apple.com/en-us/HT213255
• https://support.apple.com/en-us/HT213256
• https://support.apple.com/en-us/HT213257