CVE-2022-32886
- State
- Published
- Severity
- 8.8 High
- Published
- Sep 20, 2022
- Updated
- May 29, 2025
- Reserved
- Jun 9, 2022
Description
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
iOSApple |
|
SafariApple |
|
iOS and iPadOSApple |
|
References
- https://support.apple.com/en-us/HT213446
- https://support.apple.com/en-us/HT213445
- https://support.apple.com/en-us/HT213442
- FEDORA-2022-0c00617967vendor-advisory
- FEDORA-2022-a77b646471vendor-advisory
- FEDORA-2022-ece798a8d4vendor-advisory
- DSA-5240vendor-advisory
- DSA-5241vendor-advisory
- [debian-lts-announce] 20220929 [SECURITY] [DLA 3124-1] webkit2gtk security updatemailing-list
- 20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13mailing-list
- 20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13mailing-list
- 20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16mailing-list
- https://security.gentoo.org/glsa/202305-32
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.