CVE-2022-22579

7.8 highEPSS 1.8%

High (7.8) in apple. EPSS 1.8% chance of exploitation in the next 30 days.

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3, tvOS 15.3, Security Update 2022-001 Catalina, macOS Monterey 12.2, macOS Big Sur 11.6.3. Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
Published: 2022-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:ipados
apple:iphone_os
apple:mac_os_x
apple:macos
apple:tvos

References

https://support.apple.com/en-us/HT213053
https://support.apple.com/en-us/HT213054
https://support.apple.com/en-us/HT213055
https://support.apple.com/en-us/HT213056
https://support.apple.com/en-us/HT213057

Check your stack JSON