CVE-2022-24123: 
NixOS vulnerability analysis and mitigation

The issue was discovered in Apple macOS and related operating systems and was disclosed on January 27, 2025. When parsing a file, it could lead to an unexpected app termination. This vulnerability affects multiple Apple products including iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, and tvOS 18.3 (Apple macOS).

The vulnerability stems from improper checks during file parsing operations. The issue was addressed with improved checks in the affected systems. The vulnerability has been assigned CVE-2022-24123 and has a CVSS score of 9.8, indicating critical severity (CISA Bulletin).

When successfully exploited, this vulnerability could cause an unexpected application termination, potentially leading to denial of service conditions on affected systems (Apple macOS).

Apple has addressed this vulnerability by implementing improved checks in the latest versions of their operating systems. Users are advised to update to the fixed versions: iPadOS 17.7.4, macOS Ventura 13.7.3, macOS Sonoma 14.7.3, visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, or tvOS 18.3 (Apple macOS).