cve/2022/CVE-2022-22674.md

### [CVE-2022-22674](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22674)
![](https://img.shields.io/static/v1?label=Product&message=macOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2011.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2012.3%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=%3C%202022%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=A%20local%20user%20may%20be%20able%20to%20read%20kernel%20memory&color=brighgreen)

### Description

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Monterey 12.3.1, Security Update 2022-004 Catalina, macOS Big Sur 11.6.6. A local user may be able to read kernel memory.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors