CVE-2022-22598 in iOS

Summary

by MITRE • 03/18/2022

An issue with app access to camera metadata was addressed with improved logic. This issue is fixed in iOS 15.4 and iPadOS 15.4. An app may be able to learn information about the current camera view before being granted camera access.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 01/05/2022
• Disclosure: 03/18/2022
• Moderation: accepted
• Entry: VDB-194955
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 3.3 (VulDB)
• EPSS: 0.00279
• KEV: no
• Activities: very low
• Sector: Homeoffice, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-22598
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-22598
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-22598/