Description
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use (TOCTOU) memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| iOS and iPadOS | Apple / iOS and iPadOS | >= unspecified, < 16.2 | affected |
| ipados | apple / ipados | >= 0, < 16.2 | affected |
| iphone_os | apple / iphone_os | >= 0, < 16.2 | affected |
| macos | apple / macos | >= 0, < 13.1 | affected |
| macOS | Apple / macOS | >= unspecified, < 13.1 | affected |
| tvos | apple / tvos | >= 0, < 16.2 | affected |
| tvOS | Apple / tvOS | >= unspecified, < 16.2 | affected |
| watchos | apple / watchos | >= 0, < 16.2 | affected |
| watchOS | Apple / watchOS | >= unspecified, < 9.2 | affected |