PT-2022-7527 · Apple+7 · Ipados+14
P1Umer
·
Published
2022-09-12
·
Updated
2023-05-30
·
CVE-2022-32888
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
WebKitGTK versions prior to the fixed version
WPE WebKit versions prior to the fixed version
macOS Big Sur versions prior to 11.7
macOS Ventura versions prior to 13
iOS versions prior to 16
iOS versions prior to 15.7
iPadOS versions prior to 15.7
watchOS versions prior to 9
macOS Monterey versions prior to 12.6
tvOS versions prior to 16
Description
The issue is related to an out-of-bounds write problem, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. Processing maliciously crafted web content may lead to arbitrary code execution.
Recommendations
For WebKitGTK, update to a version that includes the fix for the out-of-bounds write issue.
For WPE WebKit, update to a version that includes the fix for the out-of-bounds write issue.
For macOS Big Sur, update to version 11.7 or later.
For macOS Ventura, update to version 13 or later.
For iOS, update to version 16 or later, or version 15.7 or later.
For iPadOS, update to version 15.7 or later.
For watchOS, update to version 9 or later.
For macOS Monterey, update to version 12.6 or later.
For tvOS, update to version 16 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Suse
Ubuntu
Ios
Ipados
Macos Big Sur
Macos Monterey
Macos Ventura
Tvos
Watchos