CVE-2022-46717: Low severity apple ios, ipados, and watchos vulnerability

Q: What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2022-46717.

Q: What is the title of this vulnerability?

The title of this vulnerability is "Accessibility. A logic issue was addressed with improved restrictions."

Q: What is the description of this vulnerability?

The description of this vulnerability is "Accessibility. A logic issue was addressed with improved restrictions."

Q: Which software products are affected by this vulnerability?

The software products affected by this vulnerability are Apple iOS (up to version 16.2), Apple iPadOS (up to version 16.2), and Apple watchOS (up to version 9.2).

Q: Where can I find more information about this vulnerability?

You can find more information about this vulnerability on Apple's support website at the following links: [https://support.apple.com/en-us/HT213530](https://support.apple.com/en-us/HT213530) and [https://support.apple.com/en-us/HT213536](https://support.apple.com/en-us/HT213536).

Published Dec 13, 2022

Updated

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch may be able to view user photos via accessibility features

Other sources

Accessibility. A logic issue was addressed with improved restrictions.

— Apple

Credit

Zitong Wu(吴梓桐)(Zhuhai No), Mickey Jin@@patch1t, Andrey Labunets, Nikita Tarakanov, Wojciech Reguła@@_r3ggi(SecuRing), Mickey Jin@@patch1t(Offensive Security), Csaba Fitzl@@theevilbit(Offensive Security), Tommy Muir@@Muirey03, John Aakerblom@@jaakerblom, an anonymous researcher, Ian Beer(Google Project Zero), pattern-f@@pattern_F_(Ant Security Light), Adam Doupé(ASU SEFCOM), Apple, Maddie Stone(Google Project Zero), Ned Williamson(Google Project Zero), Nathan Wachholz(Google Project Zero), Ivan Fratric(Google Project Zero), KirtiKumar Anandrao Ramchandani, Adam M., Hyeon Park@@tree_segment(Team ApplePIE), hazbinhotel(Trend Micro Zero Day Initiative), Samuel Groß(Google V8 Security), Dohyun Lee@@l33d0hyun(SSD Secure Disclosure Labs), Korea Univ., ABC Research s.r.o, Yonghwi Jin@@jinmo123(Theori), Xia0o0o0o(W4terDr0p), Sun Yat-sen University, Willy R. Vasquez(The University of Texas at Austin), John Balestrieri(Tinrocket), Weijia Dai@@dwj1210(Momo Security), Felix Poulin-Belanger, CVE-2022-46716, Jiwon Park, Mieszko Wawrzyniak, Michael (Biscuit) Thomas, @@real_as3617, Clément Lecigne(Google's Threat Analysis Group), ChengGang Wu(Institute of Computing Technology), Yan Kang(Institute of Computing Technology), YuHao Hu(Institute of Computing Technology), Yue Sun(Institute of Computing Technology), Jiming Wang(Institute of Computing Technology), (Institute of Computing Technology), JiKai Ren(Institute of Computing Technology), Hang Shu(Institute of Computing Technology), Chinese Academy(Sciences), KirtiKumar Anandrao Ramchandani (kirtikumarar.com), Dohyun Lee@@l33d0hyun(DNSLab at Korea University), Ryan Shin(IAAI SecLab at Korea University)

Affected Software

5 affected componentsFixes available

Apple WatchOS<9.2

9.2

Apple iOS<16.2

16.2

Apple iPadOS<16.2

16.2

Apple iPadOS<16.2

Apple iPhone OS<16.2

Event History

Apr 10, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2022-46717.

What is the title of this vulnerability?

The title of this vulnerability is "Accessibility. A logic issue was addressed with improved restrictions."

What is the description of this vulnerability?

The description of this vulnerability is "Accessibility. A logic issue was addressed with improved restrictions."

Which software products are affected by this vulnerability?