CVE-2022-37434: apple ipados Out-of-bounds Write
CVSS: 9.8v3.1CriticalModified
AliasesALPINE-CVE-2022-37434MGASA-2022-0328SUSE-SU-2022:2845-1SUSE-SU-2022:2846-1SUSE-SU-2022:2847-1SUSE-SU-2022:2947-1RHSA-2022:7106RHSA-2022:7314RHSA-2022:7793RHSA-2022:8291RHSA-2023:1095RHSA-2024:0254UBUNTU-CVE-2022-37434USN-5570-1USN-5570-2USN-5573-1DEBIAN-CVE-2022-37434DLA-3103-1DSA-5218-1CGA-742m-vwm5-p5p5CGA-9wj8-84v2-87propenSUSE-SU-2022:2947-1openSUSE-SU-2024:12270-1openSUSE-SU-2024:14386-1
Published 05-08-2022Last modified 14-10-2026
Vulnerability summary
CVE-2022-37434 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in apple ipados. EPSS estimates a 18.97% chance of exploitation in the next 30 days, higher than 97.2% of scored vulnerabilities. 4 public exploits are recorded.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
18.97%
0%100%
Medium · +1.12 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits4github
Advisory lineage
Upstream 0 · Downstream 6 · Related 8Timeline
- 05-08-2022PublishedVulnerability first disclosed.
- 14-10-2026Last modifiedVulnerability information updated.
Description
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).
CVSS metrics
8 scores · 8 sources · 1 versionCritical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources8 sources · 7.0–9.8
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated7.0HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · WolfiEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · ChainguardEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
18.97%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
+1.12 pp
From 17.85% on 18-09-2026
18-09-202618-10-2026
EPSS score18.97%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundZlib Overflow
Maturity: poc
Zlib
Maturity: poc
Node
Maturity: poc
Weaknesses
CWE · root cause- CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Affected systems
Suse34 products
- zlib&distro=SUSE Enterprise Storage 6< 1.2.11-150000.3.33.1
- zlib&distro=SUSE Enterprise Storage 7< 1.2.11-150000.3.33.1
- zlib&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.2.11-150000.3.33.1
- zlib&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.2.11-150000.3.33.1
- zlib&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS< 1.2.11-150000.3.33.1
Redhat12 products
- minizip< 0:1.2.7-21.el7_9
- minizip-compat-debuginfo< 0:1.2.11-32.el9_0
- minizip-devel< 0:1.2.7-21.el7_9
- rsync< 0:3.1.3-19.el8 | < 0:3.2.3-18.el9 | < 0:3.1.3-14.el8_6.5
- rsync-daemon< 0:3.1.3-19.el8 | < 0:3.2.3-18.el9 | < 0:3.1.3-14.el8_6.5
Opensuse5 products
- rsync&distro=openSUSE Tumbleweed< 3.2.5-1.1
- rusty_v8&distro=openSUSE Tumbleweed< 0.106.0-1.1
- zlib&distro=openSUSE Leap 15.3< 1.2.11-150000.3.33.1
- zlib&distro=openSUSE Leap 15.4< 1.2.11-150000.3.33.1
- zlib&distro=openSUSE Leap Micro 5.2< 1.2.11-150000.3.33.1
Apple4 products
Debian3 products
- libz-mingw-w64< 1.2.12+dfsg-2
- zlib< 1:1.2.11.dfsg-2+deb11u2 | < 1:1.2.11.dfsg-1+deb10u2 | < 1:1.2.11.dfsg-4.1
- debian_linuxEOL10.0
Ubuntu3 products
- klibc< 2.0.3-0ubuntu1.14.04.3+esm3 | < 2.0.4-8ubuntu1.16.04.4+esm2 | < 2.0.4-9ubuntu2.2+esm1 | < 2.0.7-1ubuntu5.2 | < 2.0.10-4ubuntu0.1 | < 2.0.13-4ubuntu0.1
- rsync< 3.1.1-3ubuntu1.3+esm2 | < 3.1.2-2.1ubuntu1.5 | < 3.1.3-8ubuntu0.4
- zlib< 1:1.2.8.dfsg-1ubuntu1.1+esm2 | < 1:1.2.8.dfsg-2ubuntu4.3+esm2 | < 1:1.2.11.dfsg-0ubuntu2.2 | < 1:1.2.11.dfsg-2ubuntu1.5 | < 1:1.2.11.dfsg-2ubuntu9.2
Alpine2 products
- zlib< 1.2.11-r4 | < 1.2.12-r2
- zlib-ng< 2.0.6-r0
Chainguard1 product
- zlib< 1.2.13-r1
Fedoraproject1 product
- fedoraEOL35 | 36 | 37
Mageia1 product
- zlib< 1.2.12-1.3.mga8
Stormshield1 product
- stormshield_network_security≥ 3.7.31, < 3.7.34 | ≥ 3.11.0, < 3.11.22 | ≥ 4.3.0, < 4.3.16 | ≥ 4.6.0, < 4.6.3
Wolfi1 product
- zlib< 1.2.13-r1
Zlib1 product
- zlib≤ 1.2.12
14 vendors · 79 products
References
77 links- github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.hWEBExploitThird Party Advisory
- github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.cWEBExploitThird Party Advisory
Show all 77 references
- lists.opensuse.org/archives/…Advisory
- lists.opensuse.org/archives/…Advisory