VDB

VAR-202212-1532

VAR-202212-1532 PUBLISHED CVSS 8.800000190734863 HIGH

Record from circl · Published April 11, 2022

A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
watchOSApple16.2, 9.2
tvOSApple16.2, 15.7, 13.1

Risk scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

VendorProductVersions
ApplewatchOSunspecified, unspecified
AppletvOS*, unspecified, unspecified

Timeline

  • Apr 11, 2022 CVE Published
  • Dec 19, 2022 PoC Published (4 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln VAR-202212-1532
vulnetix vdb fixes VAR-202212-1532

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/VAR-202212-1532/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›