Logo
›
›vulnerability›CVE-2022-32888
Name
CVE-2022-32888
Source
NVD ( link)Debian ( link)
Description
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
CWEs
CWE-787 CWE-787
Published Date
Updated Date
Workaround
-
Advisories
http://www.openwall.com/lists/oss-security/2022/11/04/4Mailing List
https://support.apple.com/en-us/HT213443Vendor Advisory
https://support.apple.com/en-us/HT213444Vendor Advisory
https://support.apple.com/en-us/HT213445Vendor Advisory
https://support.apple.com/en-us/HT213446Vendor Advisory
https://support.apple.com/en-us/HT213486Vendor Advisory
https://support.apple.com/en-us/HT213487Vendor Advisory
https://support.apple.com/en-us/HT213488Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/11/04/4Mailing List
https://support.apple.com/en-us/HT213443Vendor Advisory
https://support.apple.com/en-us/HT213444Vendor Advisory
https://support.apple.com/en-us/HT213445Vendor Advisory
https://support.apple.com/en-us/HT213446Vendor Advisory
https://support.apple.com/en-us/HT213486Vendor Advisory
https://support.apple.com/en-us/HT213487Vendor Advisory
https://support.apple.com/en-us/HT213488Vendor Advisory

Analysis#

Affected Component
Analysis
webkitgtk
Patched

Vulnerability Ratings#

8.8
CVSSv31
8.8
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
webkitgtk
buildroot
2025.02.x
2.52.3
Not Affected
webkitgtk
buildroot
master
2.52.3
Not Affected
webkitgtk
yocto
master
2.50.6
Not Affected
webkitgtk
yocto
scarthgap
2.44.4
Not Affected

Resolved with patches#

webkitgtk (yocto:kirkstone)

#
Title
Author
Resolve
1
[JSC] Drop wasm stale assertion
Yusuke Suzuki <ysuzuki@apple.com>
CVE-2022-32888