PT-2022-7569 · Apple+7 · Tvos+15
Dohyun Lee
+11
·
Published
2022-11-23
·
Updated
2025-03-11
·
CVE-2023-23517
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
macOS Monterey versions 12.6.3 and earlier
macOS Ventura versions 13.2 and earlier
watchOS versions 9.3 and earlier
macOS Big Sur versions 11.7.3 and earlier
Safari versions 16.3 and earlier
tvOS versions 16.3 and earlier
iOS versions 16.3 and earlier
iPadOS versions 16.3 and earlier
Description
The issue is related to improved memory handling and may lead to arbitrary code execution when processing maliciously crafted web content. It is associated with a buffer overflow in the WPE WebKit and WebKitGTK modules, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations
For macOS Monterey versions prior to 12.6.3, update to version 12.6.3 or later.
For macOS Ventura versions prior to 13.2, update to version 13.2 or later.
For watchOS versions prior to 9.3, update to version 9.3 or later.
For macOS Big Sur versions prior to 11.7.3, update to version 11.7.3 or later.
For Safari versions prior to 16.3, update to version 16.3 or later.
For tvOS versions prior to 16.3, update to version 16.3 or later.
For iOS versions prior to 16.3, update to version 16.3 or later.
For iPadOS versions prior to 16.3, update to version 16.3 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Astra Linux
Centos
Linuxmint
Apple Macos
Red Hat
Safari
Suse
Ubuntu
Ios
Ipados
Macos Big Sur
Macos Monterey
Macos Ventura
Tvos
Watchos