Logo
›
›vulnerability›CVE-2023-32439
Name
CVE-2023-32439
Source
NVD ( link)Debian ( link)
Description
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
CWEs
CWE-843 CWE-843
Published Date
Updated Date
Workaround
-
Advisories
https://security.gentoo.org/glsa/202401-04Third Party Advisory
https://support.apple.com/en-us/HT213811Release Notes
https://support.apple.com/en-us/HT213813Release Notes
https://support.apple.com/en-us/HT213814Release Notes
https://support.apple.com/en-us/HT213816Release Notes
https://support.apple.com/kb/HT213814Vendor Advisory
https://support.apple.com/kb/HT213816Vendor Advisory
https://security.gentoo.org/glsa/202401-04Third Party Advisory
https://support.apple.com/en-us/HT213811Release Notes
https://support.apple.com/en-us/HT213813Release Notes
https://support.apple.com/en-us/HT213814Release Notes
https://support.apple.com/en-us/HT213816Release Notes
https://support.apple.com/kb/HT213814Vendor Advisory
https://support.apple.com/kb/HT213816Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32439US Government Resource

Analysis#

Affected Component
Analysis
webkitgtk
Patched

Vulnerability Ratings#

8.8
CVSSv31
8.8
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
webkitgtk
buildroot
2025.02.x
2.52.3
Not Affected
webkitgtk
buildroot
master
2.52.3
Not Affected
webkitgtk
yocto
master
2.50.6
Not Affected
webkitgtk
yocto
scarthgap
2.44.4
Not Affected

Resolved with patches#

webkitgtk (yocto:kirkstone)

#
Title
Author
Resolve
1
Cherry-pick 263909@main (52fe95e5805c).
Yijia Huang <yijia_huang@apple.com>
CVE-2023-32439