Vulnerability Details : CVE-2022-32912
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution.
Exploit prediction scoring system (EPSS) score for CVE-2022-32912
Probability of exploitation activity in the next 30 days: 0.41%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 74 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2022-32912
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2022-32912
-
The product reads data past the end, or before the beginning, of the intended buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2022-32912
-
http://seclists.org/fulldisclosure/2022/Oct/40
Full Disclosure: APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7Mailing List;Third Party Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/47
Full Disclosure: APPLE-SA-2022-10-27-11 tvOS 16Mailing List;Third Party Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/41
Full Disclosure: APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13Mailing List;Third Party Advisory
-
https://support.apple.com/en-us/HT213445
About the security content of iOS 15.7 and iPadOS 15.7 - Apple SupportRelease Notes;Vendor Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/28
Full Disclosure: APPLE-SA-2022-10-24-2 macOS Ventura 13Mailing List;Third Party Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/39
Full Disclosure: APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16Mailing List;Third Party Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/50
Full Disclosure: APPLE-SA-2022-10-27-14 Additional information for APPLE-SA-2022-09-12-5 Safari 16Mailing List;Third Party Advisory
-
http://seclists.org/fulldisclosure/2022/Oct/49
Full Disclosure: APPLE-SA-2022-10-27-13 watchOS 9Mailing List;Third Party Advisory
-
https://support.apple.com/en-us/HT213446
About the security content of iOS 16 - Apple SupportRelease Notes;Vendor Advisory
-
https://support.apple.com/en-us/HT213442
About the security content of Safari 16 - Apple SupportRelease Notes;Vendor Advisory
Products affected by CVE-2022-32912
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*