PT-2022-7527

CVE-2022-32888

·

Published

2022-09-12

·

Updated

2023-05-30

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions WebKitGTK versions prior to the fixed version WPE WebKit versions prior to the fixed version macOS Big Sur versions prior to 11.7 macOS Ventura versions prior to 13 iOS versions prior to 16 iOS versions prior to 15.7 iPadOS versions prior to 15.7 watchOS versions prior to 9 macOS Monterey versions prior to 12.6 tvOS versions prior to 16
Description The issue is related to an out-of-bounds write problem, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. Processing maliciously crafted web content may lead to arbitrary code execution.
Recommendations For WebKitGTK, update to a version that includes the fix for the out-of-bounds write issue. For WPE WebKit, update to a version that includes the fix for the out-of-bounds write issue. For macOS Big Sur, update to version 11.7 or later. For macOS Ventura, update to version 13 or later. For iOS, update to version 16 or later, or version 15.7 or later. For iPadOS, update to version 15.7 or later. For watchOS, update to version 9 or later. For macOS Monterey, update to version 12.6 or later. For tvOS, update to version 16 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2023:2256
ALSA-2023:2834
CESA-2023_2834
DLA-3124-1
DSA-5240-1
DSA-5241-1
MGASA-2022-0421
OPENSUSE-SU-2022_4207-1
OPENSUSE-SU-2022_4285-1
RHSA-2023:2256
RHSA-2023_2256
RHSA-2023:2834
RHSA-2023_2834
RHSA-2025:10364
SUSE-SU-2022:4207-1
SUSE-SU-2022_4207-1
SUSE-SU-2022:4283-1
SUSE-SU-2022_4283-1
SUSE-SU-2022:4284-1
SUSE-SU-2022_4284-1
SUSE-SU-2022:4285-1
SUSE-SU-2022_4285-1
USN-5730-1
Found an issue in the description? Have something to add? Feel free to write us 👾