CVE-2022-32886

Published: Sep 20, 2022Modified: May 29, 2025

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected (8)

Products: Apple: Ipados, Iphone Os, Safari · Fedoraproject: Fedora · Debian: Debian Linux

3 products

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 15.7
Apple Iphone Os	Before 15.7
Apple Safari	Before 16.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 35
Fedoraproject Fedora	Version 36
Fedoraproject Fedora	Version 37

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (26)

http://seclists.org/fulldisclosure/2022/Oct/28

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2022/Oct/39

Source: product-security@apple.com

http://seclists.org/fulldisclosure/2022/Oct/41

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2022/09/msg00034.html

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/74MXH2U5GA4CX3L3NLYP4TBO4O2VOPBJ/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KDV6OLKDTL55NH4LNSMLQ4D6LLSX6JU2/

Source: product-security@apple.com

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TDNT32WIARRD2ANWKGCTTIQXI6OII7HZ/

Source: product-security@apple.com

https://security.gentoo.org/glsa/202305-32

Source: product-security@apple.com

https://support.apple.com/en-us/HT213442

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213445

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT213446

Source: product-security@apple.com

Release NotesVendor Advisory

https://www.debian.org/security/2022/dsa-5240

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://www.debian.org/security/2022/dsa-5241

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2022/Oct/28