CVE-2022-22634: Apple iPadOS

High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days.

A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.

Affected products

• Apple iPadOS: before 15.4 (fixed in 15.4)
• Apple iPhone OS: before 15.4 (fixed in 15.4)
• Apple tvOS: before 15.4 (fixed in 15.4)

Published 2022-03-18. Last modified 2026-06-17.