CVE-2022-22603: Apple Xcode

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 13.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

Affected products

• Apple Xcode: before 13.3 (fixed in 13.3)

Published 2022-03-18. Last modified 2026-06-17.