CVE-2022-3970: Apple iPadOS

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A vulnerability was found in LibTIFF. It has been classified as critical. This affects the function TIFFReadRGBATileExt of the file libtiff/tif_getimage.c. The manipulation leads to integer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 227500897dfb07fb7d27f7aa570050e62617e3be. It is recommended to apply a patch to fix this issue. The identifier VDB-213549 was assigned to this vulnerability.

Affected products

• Apple iPadOS: before 16.6 (fixed in 16.6)
• Apple iPhone OS: before 16.6 (fixed in 16.6)
• Apple macOS: before 13.5 (fixed in 13.5)
• Apple Safari: before 16.5.1 (fixed in 16.5.1)
• Debian Debian Linux: version 10.0 only
• Libtiff Libtiff: before 4.5.0 (fixed in 4.5.0)
• Netapp Active Iq Unified Manager: affected versions not specified

Published 2022-11-13. Last modified 2026-06-17.