8.8
High
CVE-2022-32912 An out-of-bounds read was addressed with improved bounds checking
Description
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iOS 16 | earliest → < 16 | 16 |
| Safari 16 | earliest → < 16 | 16 |
| iOS and iPadOS 15.7 | earliest → < 15.7 | 15.7 |
References
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- 20221030 APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 seclists.org
- 20221030 APPLE-SA-2022-10-24-2 macOS Ventura 13 seclists.org
- 20221030 APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 seclists.org
- 20221030 APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 seclists.org
- 20221030 APPLE-SA-2022-10-27-13 watchOS 9 seclists.org
- 20221030 APPLE-SA-2022-10-27-14 Additional information for APPLE-SA-2022-09-12-5 Safari 16 seclists.org
- 20221030 APPLE-SA-2022-10-27-11 tvOS 16 seclists.org
Timeline
- Published
- Last modified
Other CVEs of iOS
The 507 CVEs of iOS →
CVE-2024-44229
An information leakage was addressed with additional validation
5.3
Medium
CVE-2024-44218
This issue was addressed with improved checks
7.8
High
CVE-2024-40867
A custom URL scheme handling issue was addressed with improved input validation
8.8
High
CVE-2024-44259
This issue was addressed through improved state management
8.8
High