CVE-2023-39434

Name of the Vulnerable Software and Affected Versions iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Sonoma versions prior to 14

Description A use-after-free issue was addressed with improved memory management. Processing web content may lead to arbitrary code execution. This issue is related to the WebKitGTK and WPE WebKit modules, which are used for displaying web pages. The exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For iOS versions prior to 17, update to iOS 17 or later. For iPadOS versions prior to 17, update to iPadOS 17 or later. For watchOS versions prior to 10, update to watchOS 10 or later. For macOS Sonoma versions prior to 14, update to macOS Sonoma 14 or later. As a temporary workaround, consider restricting web content processing until a patch is available. Avoid using vulnerable WebKitGTK and WPE WebKit modules in web page display until the issue is resolved.