The vulnerability, dubbed CVE-2022-22587, stems from a memory corruption flaw in the IOMobileFrameBuffer component, which might be exploited by a malicious application to run arbitrary code with kernel privileges.
The iPhone manufacturer said it’s “aware of a report that this issue may have been actively exploited,” and that it’s “aware of a report that this issue may have been actively exploited.” It added that it’s “aware of a report that this issue may have been actively exploited,” and that it’s It didn’t say what kind of attacks were launched, how extensive they were, or who was behind them.