PT-2022-6742 · Apple+7 · Safari+11
P1Umer
+1
·
Published
2022-07-20
·
Updated
2023-11-14
·
CVE-2022-32885
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 15.6
iOS versions prior to 15.6
iPadOS versions prior to 15.6
macOS Monterey versions prior to 12.5
Description
A memory corruption issue was addressed with improved validation. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to a buffer overflow in WPE WebKit and WebKitGTK modules, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.
Recommendations
For Safari versions prior to 15.6, update to Safari 15.6 to resolve the issue.
For iOS versions prior to 15.6, update to iOS 15.6 to resolve the issue.
For iPadOS versions prior to 15.6, update to iPadOS 15.6 to resolve the issue.
For macOS Monterey versions prior to 12.5, update to macOS Monterey 12.5 to resolve the issue.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Safari
Suse
Ubuntu
Ios
Ipados
Macos Monterey