high8.8
CVE-2023-28198
A use-after-free issue was addressed with improved memory management.
Impact
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 16.4 |
| Apple | Iphone Os | before 16.4 |
| Apple | Macos | from 13.0 before 13.3 |
| Webkitgtk | Webkitgtk | before 2.40.1 |
| Wpewebkit | Wpe Webkit | before 2.40.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2023/09/11/1
- https://security.gentoo.org/glsa/202401-04
- https://support.apple.com/en-us/HT213670
- https://support.apple.com/en-us/HT213676
- http://www.openwall.com/lists/oss-security/2023/09/11/1
- https://security.gentoo.org/glsa/202401-04
- https://support.apple.com/en-us/HT213670
- https://support.apple.com/en-us/HT213676