Firetruck

CVE-2022-48618

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
iOS and iPadOSApple / iOS and iPadOS>= unspecified, < 16.2affected
ipadosapple / ipados>= 0, < 16.2affected
iphone_osapple / iphone_os>= 0, < 16.2affected
macosapple / macos>= 0, < 13.1affected
macOSApple / macOS>= unspecified, < 13.1affected
tvosapple / tvos>= 0, < 16.2affected
tvOSApple / tvOS>= unspecified, < 16.2affected
watchosapple / watchos>= 0, < 16.2affected
watchOSApple / watchOS>= unspecified, < 9.2affected