Wind River Support Network

HomeDefectsLIN1021-4944

Acknowledged

LIN1021-4944 : Security Advisory - webkitgtk - CVE-2022-42856

Created: Dec 15, 2022 Updated: Dec 19, 2022

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A type confusion issue was addressed with improved state handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.1.2. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS released before iOS 15.1..

CREATE(Triage):(User=admin) CVE-2022-42856 (https://nvd.nist.gov/vuln/detail/CVE-2022-42856)