DYLIB Injection in JetBrains IntelliJ IDEA < 2022.3 on macOS
CVE-2022-46828 Published on December 8, 2022
In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.
Vulnerability Analysis
CVE-2022-46828 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.
Weakness Type
Insufficient Control Flow Management
The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.
Products Associated with CVE-2022-46828
Want to know whenever a new CVE is published for JetBrains Intellij Idea? stack.watch will email you.
Affected Versions
JetBrains IntelliJ IDEA:- Before 2022.3 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.