High (7.8) in Apple iOS and iPadOS. In CISA KEV since 2022-06-27. EPSS 2.9% chance of exploitation in the next 30 days.
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with kernel privileges.
Severity
CVSS 3.1
7.8 high
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
2.9% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)