CVE-2022-46696

published 2022-12-15

CVE-2022-46696: A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS…

high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

A memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
apple	ios_16.2_and_ipados	—	—
apple	ipados	< 16.2	16.2
apple	iphone_os	< 16.2	16.2
apple	macos	< 13.1	13.1
apple	macos_ventura	—	—
apple	safari	< 16.2	16.2
apple	safari	—	—
apple	tvos	< 16.2	16.2
apple	tvos	>= unspecified < 16.2	16.2
apple	tvos	>= unspecified < 13.1	13.1
apple	tvos16.2	—	—
apple	watchos	< 9.2	9.2
apple	watchos	—	—
apple	watchos	>= unspecified < 9.2	9.2
apple	watchos	>= unspecified < 16.2	16.2

CWE-787