Aktívan kihasznált, iOS-t, iPadOS-t, macOS-t érintő sebezhetőségre adott ki az Apple soron kívüli javítást

Apple is rolling out emergency security patches to address 2 new zero-day vulnerabilities affecting #iOS, iPadOS and #macOS operating systems that may have been exploited in the wild.

Details: https://t.co/aAjM2qNGsP#infosec #hackernews #cybersecurity #mobilesecurity #iphone

— The Hacker News (@TheHackersNews) April 1, 2022

Tracked as CVE-2022-22675, the issue has been described as an out-of-bounds write vulnerability in an audio and video decoding component called AppleAVD that could allow an application to execute arbitrary code with kernel privileges. Apple said the defect was resolved with improved bounds checking, adding it's aware that "this issue may have been actively exploited."

Részletek itt.