Out-of-bounds write in Apple Safari
Priority CRITICAL 97Exploited in the wildCWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 4 fixed, 2 without a fix
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.
Summary
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS 15.6.1, macOS Monterey 12.5.1, Safari 15.6.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Why it matters now
Exploitation Active In CISA KEV since 2022-08-18CISA due date 2022-09-08
EPSS 0.09931 95th percentileScored 2026-11-07
Fix Partial Safari (Apple): 15.6iOS and iPadOS (Apple): 15.6+1 more productRed Hat: 3 advisoriesRed Hat: 4 fixed, 2 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Apple | Safari | before 15.6 | 15.6 | Patch available | CNA |
| Apple | iOS and iPadOS | before 15.6 | 15.6 | Patch available | CNA |
| Apple | macOS | before 12.5 | 12.5 | Patch available | CNA |
- Safari VendorApple Affected before 15.6 Fixed in 15.6 Patch available CNA
- iOS and iPadOS VendorApple Affected before 15.6 Fixed in 15.6 Patch available CNA
- macOS VendorApple Affected before 12.5 Fixed in 12.5 Patch available CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* | before 15.6.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | before 15.6.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | before 15.6.1 | Vulnerable | Apple |
| cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* | 12.0 to before 12.5.1 | Vulnerable | Apple |
| cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* | 35 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* | 36 | Vulnerable | Fedoraproject |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Debian |
| cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:* | before 2.36.7 | Vulnerable | WebKitGTK |
| cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:* | before 2.36.7 | Vulnerable | Wpewebkit |
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* Versions before 15.6.1 Vulnerable ·Apple
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* Versions before 15.6.1 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 15.6.1 Vulnerable ·Apple
- cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions 12.0 to before 12.5.1 Vulnerable ·Apple
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* Versions 35 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* Versions 36 Vulnerable ·Fedoraproject
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
- cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:* Versions before 2.36.7 Vulnerable ·WebKitGTK
- cpe:2.3:a:wpewebkit:wpe_webkit:*:*:*:*:*:*:*:* Versions before 2.36.7 Vulnerable ·Wpewebkit
Remediation
- Fix · CNA Safari (Apple) Fixed in 15.6
- Fix · CNA iOS and iPadOS (Apple) Fixed in 15.6
- Fix · CNA macOS (Apple) Fixed in 12.5
Red Hat 3 advisories
- RHSA-2025:10364 Released 2025-07-07 · Red Hat rating Importantwebkitgtk4 security update
- Red Hat Enterprise Linux Server (v. 7 ELS) webkitgtk4-2.48.3-2.el7_9, webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-jsc-2.48.3-2.el7_9 +1
- Red Hat Enterprise Linux Server Optional (v. 7 ELS) webkitgtk4-devel-2.48.3-2.el7_9, webkitgtk4-doc-2.48.3-2.el7_9, webkitgtk4-jsc-devel-2.48.3-2.el7_9
- RHSA-2022:6634 Released 2022-09-20 · Red Hat rating Moderatewebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream (v. 9) webkit2gtk3-2.36.7-1.el9_0, webkit2gtk3-devel-2.36.7-1.el9_0, webkit2gtk3-jsc-2.36.7-1.el9_0 +1
- RHSA-2022:6540 Released 2022-09-15 · Red Hat rating Moderatewebkit2gtk3 security update
- Red Hat Enterprise Linux AppStream (v. 8) webkit2gtk3-2.36.7-1.el8_6, webkit2gtk3-devel-2.36.7-1.el8_6, webkit2gtk3-jsc-2.36.7-1.el8_6 +1
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Apple macOS — FEDORA-2022-eada5f24a0
2 records Highest priority Priority CRITICAL 1 CRITICAL, 1 MEDIUM
Other records, highest priority first
- TI-2022-14333 Out-of-bounds write in Apple macOSPriority MEDIUM 41
- Advisory ·
Apple macOS — FEDORA-2022-ddfeee50c9
2 records Highest priority Priority CRITICAL 1 CRITICAL, 1 MEDIUM
Other records, highest priority first
- TI-2022-14333 Out-of-bounds write in Apple macOSPriority MEDIUM 41
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2022:6540 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2022:6634 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2025:10364 |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Fixed | RHSA-2025:10364 |
Timeline
- 2022-08-18 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2022-32893
- 2026-10-03 Alias added: GHSA-qjpw-c5xf-g33j
References
Advisory 17
- https://support.apple.com/en-us/HT213414
- https://support.apple.com/en-us/HT213412
- https://support.apple.com/en-us/HT213413
- [oss-security] 20220825 WebKitGTK and WPE WebKit Security Advisory WSA-2022-0008
- [oss-security] 20220826 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0008
- FEDORA-2022-eada5f24a0
- DSA-5220
- DSA-5219
- [oss-security] 20220829 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0008
- [oss-security] 20220829 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0008
- [debian-lts-announce] 20220830 [SECURITY] [DLA 3087-1] webkit2gtk security update
- GLSA-202208-39
- 20220831 APPLE-SA-2022-08-31-1 iOS 12.5.6
- [oss-security] 20220902 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0008
- FEDORA-2022-ddfeee50c9
- [oss-security] 20220913 Re: WebKitGTK and WPE WebKit Security Advisory WSA-2022-0008
- 20221030 APPLE-SA-2022-10-27-13 watchOS 9
More Apple Ipados vulnerabilities
- TI-2025-28008 Out-of-bounds write in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
- TI-2025-22441 Apple iOS and iPadOS: An attacker with arbitrary read and write capability may be able to… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-22440 Memory corruption in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 9.8
- TI-2025-17951 Out-of-bounds write in Apple Safari KEVCVSS 3.1CRITICAL 10.0
- TI-2025-17847 Use after free in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 10.0
- TI-2022-06854 Out-of-bounds write in Apple iOS and iPadOS KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2022-32893 · CVE Program
- CVE-2022-32893 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-qjpw-c5xf-g33j · GitHub Advisory Database · CC BY 4.0
- CVE-2022-32893 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences