CVE-2022-22629

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

Almalinux, Astra Linux, Centos, Linuxmint, Apple Macos, Red Hat, Rocky Linux, Safari

Apple Itunes

< 12.12.3

Apple Safari

< 15.4

Apple Ipados

< 15.4

Apple Iphone Os

< 15.4

Apple Macos

< 12.3

Apple Tvos

< 15.4

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

4.0% (90th percentile)

Weakness

CWE-787

NVD status

Modified

Published

2022-09-23