CVE-2022-22585 | BDVDB-2026-172124 Detail

AppleiOS and iPadOS

Description#

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.apple.com/en-us/HT213055
https://support.apple.com/en-us/HT213053
https://support.apple.com/en-us/HT213054
https://support.apple.com/en-us/HT213057
https://support.apple.com/en-us/HT213059

Exploit#

No public exploit known

History#

Version 12022-03-18Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.