CVE-2022-32893: Apple iOS and macOS Out-of-Bounds Write Vulnerability
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Other sources
Apple iOS and macOS contain an out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.
— CISA
Processing maliciously crafted web content may lead to arbitrary code execution via an out-of-bounds write.
Reference:
https://webkitgtk.org/security/WSA-2022-0008.html
— Red Hat
WebKit. An out-of-bounds write issue was addressed with improved bounds checking.
— Apple
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2022-42795
- CVE-2022-32907
- CVE-2022-32858
- CVE-2022-32898
- CVE-2022-32899
- CVE-2022-32889
- CVE-2022-32854
- CVE-2022-32928
- CVE-2022-32903
- CVE-2022-1622
- CVE-2022-32913
- CVE-2022-32864
- CVE-2022-32866
- CVE-2022-32911
- CVE-2022-32914
- CVE-2022-32894
- CVE-2022-32883
- CVE-2022-32908
- CVE-2022-32879
- CVE-2022-32881
- CVE-2022-32870
- CVE-2021-36690
- CVE-2022-32835
- CVE-2022-32875
- CVE-2022-32886
- CVE-2022-32888
- CVE-2022-32912
- CVE-2022-32891
- CVE-2022-32893
- CVE-2022-46709
- CVE-2022-32925
Frequently Asked Questions
What is CVE-2022-32893?
CVE-2022-32893 is an Apple iOS and macOS out-of-bounds write vulnerability that could allow for remote code execution when processing malicious crafted web content.
Which software is affected by CVE-2022-32893?
Apple iOS, macOS, Safari, iPadOS, and watchOS are affected by CVE-2022-32893.
How can remote code execution be achieved with CVE-2022-32893?
Remote code execution can be achieved by exploiting the out-of-bounds write vulnerability in Apple iOS and macOS when processing malicious crafted web content.
What is the severity of CVE-2022-32893?
The severity of CVE-2022-32893 is not specified.
How can I fix CVE-2022-32893?
To fix CVE-2022-32893, update to Apple iOS and macOS versions 15.6.1, iOS version 12.5.6, iPadOS version 15.6.1, and watchOS version 9 or newer.