CVE-2022-32946

—

CVSS 3.1

5.5 medium

EPSS

<1%p16

Published

Nov 1, 2022 (Nov 1, 2022)

Modified

Jun 17, 2026

Description

This issue was addressed with improved entitlements. This issue is fixed in iOS 16.1 and iPadOS 16. An app may be able to record audio using a pair of connected AirPods.

Vendors: apple
Products: ipados, iphone os
Weakness: CWE-284
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news4 stories

Apple fixes exploited iOS, iPadOS zero-day (CVE-2022-42827)

Help Net SecurityOct 28, 09:20 UTC · Oct 28, 2022Exploit / PoC in the wildCVE-2022-42827 CVE-2022-32946

Apple iOS and macOS Flaw Could've Let Apps Eavesdrop on Your Conversations with Siri

The Hacker NewsOct 28, 07:14 UTC · Oct 28, 2022Exploit / PoC in the wildCVE-2022-32946 CVE-2022-42827

iOS Bluetooth Bug Allowed Apps to Eavesdrop on User Conversations

Infosecurity MagazineOct 27, 17:00 UTC · Oct 27, 2022Vulnerability CVE-2022-32946

SiriSpy flaw allows eavesdropping on users' conversations with Siri

Security AffairsOct 27, 13:38 UTC · Oct 27, 2022Vulnerability CVE-2022-32946