CVE-2022-32839: 
macOS vulnerability analysis and mitigation

CVE-2022-32839 is a security vulnerability discovered in Apple's CoreText component that was fixed in July 2022. The vulnerability affects multiple Apple operating systems including macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, and watchOS 8.7. The issue was identified by Daniel Lim Wee Soong of STAR Labs (Apple Support).

The vulnerability was caused by improper bounds checking in the CoreText component. Apple addressed this security flaw by implementing improved bounds checks in the affected systems (NVD). The vulnerability has been assigned a CVSS v3.1 base score of 9.8 CRITICAL with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (NVD).

When exploited, this vulnerability could allow a remote user to cause unexpected application termination or execute arbitrary code on the affected system (Apple Support, CVE).

Apple has released security updates to address this vulnerability across multiple platforms. Users should update to macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catalina, iOS 15.6 and iPadOS 15.6, tvOS 15.6, or watchOS 8.7 depending on their device (Apple Support).