VDB
GHSA-rjj4-r4wr-cjq8
GHSA-rjj4-r4wr-cjq8
PUBLISHED
CVSS 8.800000190734863 HIGH
Record from GitHub Advisory Database · Published November 2, 2022
A type confusion issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, macOS Ventura 13, watchOS 9.1, Safari 16.1, iOS 16.1 and iPadOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
Risk scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Timeline
- Nov 2, 2022 CVE Published
- Apr 10, 2026 Security Advisory (4 in total, the first dated here)
- May 1, 2026 Distribution Patch (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-rjj4-r4wr-cjq8
vulnetix vdb fixes GHSA-rjj4-r4wr-cjq8
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-rjj4-r4wr-cjq8/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LF4LYP725XZ7RWOPFUV6DGPN4Q5DUU4 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JOFKX6BUEJFECSVFV6P5INQCOYQBB4NZ url
- https://nvd.nist.gov/vuln/detail/CVE-2022-42823 advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AQKLEGJK3LHAKUQOLBHNR2DI3IUGLLTY url
- http://www.openwall.com/lists/oss-security/2022/11/04/4 url
- https://security.gentoo.org/glsa/202305-32 advisory
- https://support.apple.com/en-us/HT213488 advisory
- https://support.apple.com/en-us/HT213489 advisory
- https://lists.debian.org/debian-lts-announce/2022/11/msg00010.html advisory
- https://support.apple.com/en-us/HT213492 advisory
- https://support.apple.com/en-us/HT213495 advisory
- https://www.debian.org/security/2022/dsa-5273 advisory
- https://www.debian.org/security/2022/dsa-5274 advisory
- https://support.apple.com/en-us/HT213491 advisory