CVE-2022-22642: Critical severity apple ios and ipados vulnerability

Q: What is CVE-2022-22642?

CVE-2022-22642 is a vulnerability in FaceTime that allowed for unauthorized access to audio calls.

Q: How was CVE-2022-22642 addressed?

CVE-2022-22642 was addressed by implementing improved checks in FaceTime.

Q: Which software versions are affected by CVE-2022-22642?

CVE-2022-22642 affects Apple iOS and iPadOS versions up to, but not including, 15.4.

Q: Where can I find more information about CVE-2022-22642?

You can find more information about CVE-2022-22642 on the Apple support website at https://support.apple.com/en-us/HT213182.

Published Mar 14, 2022

Updated

FaceTime. This issue was addressed with improved checks.

Other sources

This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt.

Credit

Yicong Ding@@AntonioDing

Affected Software

4 affected componentsFixes available

Apple iOS and iPadOS<15.4

15.4

Apple iOS, iPadOS, and macOS<15.4

15.4

Apple iOS, iPadOS, and macOS<15.4

iPhone OS<15.4

Event History

Mar 18, 2022

CVE Published

via MITRE·05:59 PM

Data Sourced

via MITRE·05:59 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

HT213182

Frequently Asked Questions

What is CVE-2022-22642?

CVE-2022-22642 is a vulnerability in FaceTime that allowed for unauthorized access to audio calls.

How was CVE-2022-22642 addressed?

CVE-2022-22642 was addressed by implementing improved checks in FaceTime.

Which software versions are affected by CVE-2022-22642?

CVE-2022-22642 affects Apple iOS and iPadOS versions up to, but not including, 15.4.

Where can I find more information about CVE-2022-22642?