CVE-2022-22658

{"id": "CVE-2022-22658", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2022-11-01T20:15:17.233", "references": [{"url": "https://support.apple.com/en-us/HT213480", "tags": ["Release Notes", "Vendor Advisory"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An input validation issue was addressed with improved input validation. This issue is fixed in iOS 16.0.3. Processing a maliciously crafted email message may lead to a denial-of-service."}, {"lang": "es", "value": "Se solucion\u00f3 un problema de validaci\u00f3n de entradas mejorando la validaci\u00f3n de entradas. Este problema se solucion\u00f3 en iOS 16.0.3. Procesar un mensaje de correo electr\u00f3nico creado con fines malintencionados puede provocar una denegaci\u00f3n de servicio."}], "lastModified": "2022-11-03T13:46:30.623", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9E7782B8-C067-41B4-A760-953E178808CD", "versionEndExcluding": "16.0.3"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}