CVE-2022-22629

webkitgtk: Buffer overflow leading to arbitrary code execution

Published Sep 23, 2022 CVSS 3.1 · 8.8 High EPSS 5.1% KEV · Not listed
Description
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-5115-1 webkit2gtk security update
Debian DSA Debian DSA DSA-5116-1 wpewebkit security update
Ubuntu USN Ubuntu USN USN-5394-1 WebKitGTK vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.15445}

epss

{'score': 0.15792}

Type Values Removed Values Added
First Time appeared Redhat rhel Els
CPEs cpe:/o:redhat:rhel_els:7
Vendors & Products Redhat rhel Els
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
May 22, 2025, 2:47 PM
Reserved
Jan 5, 2022, 12:00 AM
Status
Modified
Published
Sep 23, 2022, 8:15 PM
Modified
Jun 17, 2026, 4:28 AM
Severity
Moderate
Public date
Apr 8, 2022, 12:00 AM