---
cve: "CVE-2022-32844"
severity: "MEDIUM"
cvss: 6.3
epss: "0.2%"
vendor: "Apple"
kev: false
exploited: false
published: "2023-02-27 20:15:11"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-21T05:13:27+02:00"
---

# CVE-2022-32844

> 6.3 MEDIUM

## Beschreibung

A race condition was addressed with improved state handling. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6. An app with arbitrary kernel read and write capability may be able to bypass Pointer Authentication.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Hoch | good |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Keine | good |

## Referenzen

- <https://support.apple.com/en-us/HT213340>
- <https://support.apple.com/en-us/HT213342>
- <https://support.apple.com/en-us/HT213346>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2022-32844) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_