Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-42823

A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.

Published

2022-11-01T20:15:24.087

Last Modified

2025-04-21T16:15:51.220

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Primary
CWE-843
Type: Secondary
CWE-843

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apple	safari	< 16.1	Yes
Operating System	apple	ipados	< 16.0	Yes
Operating System	apple	iphone_os	< 16.1	Yes
Operating System	apple	macos	< 13.0	Yes
Operating System	apple	tvos	< 16.1	Yes
Operating System	apple	watchos	< 9.1	Yes
Operating System	fedoraproject	fedora	35	Yes
Operating System	fedoraproject	fedora	36	Yes
Operating System	fedoraproject	fedora	37	Yes
Operating System	debian	debian_linux	10.0	Yes
Operating System	debian	debian_linux	11.0	Yes

References

http://www.openwall.com/lists/oss-security/2022/11/04/4 Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html Mailing List, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/ ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/ ([email protected])
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/ ([email protected])
https://security.gentoo.org/glsa/202305-32 ([email protected])
https://support.apple.com/en-us/HT213488 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213489 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213491 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213492 Vendor Advisory ([email protected])
https://support.apple.com/en-us/HT213495 Vendor Advisory ([email protected])
https://www.debian.org/security/2022/dsa-5273 Third Party Advisory ([email protected])
https://www.debian.org/security/2022/dsa-5274 Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2022/11/04/4 Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY/ (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ/ (af854a3a-2127-422b-91ae-364da2661108)
https://security.gentoo.org/glsa/202305-32 (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213488 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213489 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213491 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213492 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/en-us/HT213495 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2022/dsa-5273 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.debian.org/security/2022/dsa-5274 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)