CVE-2023-32439: Apple Multiple Products WebKit Type Confusion Vulnerability
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, Safari 16.5.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Other sources
Apple iOS, iPadOS, macOS, and Safari WebKit contain a type confusion vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
— CISA
Kernel. An integer overflow was addressed with improved input validation.
— Apple
Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited. A type confusion issue was addressed with improved checks.
Reference: https://webkitgtk.org/security/WSA-2023-0005.html
— Red Hat
WebKit. A type confusion issue was addressed with improved checks.
— Apple
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2023-32439?
The severity of CVE-2023-32439 is high with a severity value of 8.8.
What is the vulnerability description of CVE-2023-32439?
CVE-2023-32439 is a type confusion vulnerability in Apple Multiple Products WebKit that can lead to arbitrary code execution when processing maliciously crafted web content.
Which products are affected by CVE-2023-32439?
CVE-2023-32439 affects multiple Apple products including iOS, iPadOS, macOS Ventura, and Safari.
How can I fix CVE-2023-32439?
CVE-2023-32439 is fixed in iOS 16.5.1 and iPadOS 16.5.1, iOS 15.7.7 and iPadOS 15.7.7, macOS Ventura 13.4.1, and Safari 16.5.1. It is recommended to update to these versions.
Where can I find more information about CVE-2023-32439?
You can find more information about CVE-2023-32439 on the Apple support website at the following URLs: [URL 1](https://support.apple.com/en-us/HT213811), [URL 2](https://support.apple.com/en-us/HT213813), [URL 3](https://support.apple.com/en-us/HT213814).