CVE-2022-42867

Description

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

References

https://support.apple.com/en-us/HT213537

https://support.apple.com/en-us/HT213535

https://support.apple.com/en-us/HT213532

https://support.apple.com/en-us/HT213536

https://support.apple.com/en-us/HT213530

https://security.gentoo.org/glsa/202305-32

http://www.openwall.com/lists/oss-security/2022/12/26/1

http://seclists.org/fulldisclosure/2022/Dec/28

http://seclists.org/fulldisclosure/2022/Dec/27

http://seclists.org/fulldisclosure/2022/Dec/26

http://seclists.org/fulldisclosure/2022/Dec/23

http://seclists.org/fulldisclosure/2022/Dec/20

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3