Description
Multiple out-of-bounds write issues were addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5, watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6. An app may be able to disclose kernel memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apple | macOS | unspecified – < 12.5 | 12.5 |
| Apple | tvOS | unspecified – < 15.6 | 15.6 |
| Apple | watchOS | unspecified – < 8.7, unspecified – < 15.6 | 8.7 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | webkitgtk4 +3 | 2.38.5-3.amzn2.0.1 | ALAS2-2023-2088 |
Advisories 3
- WID-SEC-2022-0778 Apple macOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2025
- WID-SEC-2022-0782 Apple iOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 20, 2025
- ALAS2-2023-2088 Important: webkitgtk4 security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Aug 28, 2024