An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.8 and iPadOS 14.8, tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted audio file may disclose restricted memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-webkit2gtk3alma-upgrade-webkit2gtk3-develalma-upgrade-webkit2gtk3-jscalma-upgrade-webkit2gtk3-jsc-devel | May 13, 2022 | Oct 28, 2021 | |
| Alpine Linux | alpine-linux-upgrade-webkit2gtk | Aug 22, 2024 | Oct 28, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-webkitgtk4amazon-linux-ami-2-upgrade-webkitgtk4-debuginfoamazon-linux-ami-2-upgrade-webkitgtk4-develamazon-linux-ami-2-upgrade-webkitgtk4-jscamazon-linux-ami-2-upgrade-webkitgtk4-jsc-devel | Jun 13, 2023 | Oct 28, 2021 | |
| Apple Osx Webkit | apple-osx-upgrade-latest | Feb 18, 2022 | Oct 28, 2021 | |
| Apple Safari | apple-safari-upgrade-15apple-safari-windows-uninstall | Feb 18, 2022 | Oct 28, 2021 | |
| Centos_linux | — | centos-upgrade-webkit2gtk3centos-upgrade-webkit2gtk3-debuginfocentos-upgrade-webkit2gtk3-debugsourcecentos-upgrade-webkit2gtk3-develcentos-upgrade-webkit2gtk3-devel-debuginfocentos-upgrade-webkit2gtk3-jsccentos-upgrade-webkit2gtk3-jsc-debuginfocentos-upgrade-webkit2gtk3-jsc-develcentos-upgrade-webkit2gtk3-jsc-devel-debuginfo | May 13, 2022 | Oct 28, 2021 |
| Debian | debian-upgrade-webkit2gtkdebian-upgrade-wpewebkit | Dec 23, 2021 | Oct 28, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-net-libs-webkit-gtk | Feb 2, 2022 | Oct 28, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-webkit2gtk3oracle-linux-upgrade-webkit2gtk3-develoracle-linux-upgrade-webkit2gtk3-jscoracle-linux-upgrade-webkit2gtk3-jsc-devel | May 18, 2022 | Dec 20, 2021 |
| Redhat_linux | redhat-upgrade-webkit2gtk3redhat-upgrade-webkit2gtk3-debuginforedhat-upgrade-webkit2gtk3-debugsourceredhat-upgrade-webkit2gtk3-develredhat-upgrade-webkit2gtk3-devel-debuginforedhat-upgrade-webkit2gtk3-jscredhat-upgrade-webkit2gtk3-jsc-debuginforedhat-upgrade-webkit2gtk3-jsc-develredhat-upgrade-webkit2gtk3-jsc-devel-debuginforedhat-upgrade-webkitgtk4redhat-upgrade-webkitgtk4-debuginforedhat-upgrade-webkitgtk4-develredhat-upgrade-webkitgtk4-docredhat-upgrade-webkitgtk4-jscredhat-upgrade-webkitgtk4-jsc-devel | May 13, 2022 | Oct 28, 2021 | |
| Rocky_linux | rocky-upgrade-webkit2gtk3rocky-upgrade-webkit2gtk3-debuginforocky-upgrade-webkit2gtk3-debugsourcerocky-upgrade-webkit2gtk3-develrocky-upgrade-webkit2gtk3-devel-debuginforocky-upgrade-webkit2gtk3-jscrocky-upgrade-webkit2gtk3-jsc-debuginforocky-upgrade-webkit2gtk3-jsc-develrocky-upgrade-webkit2gtk3-jsc-devel-debuginfo | May 20, 2022 | Oct 28, 2021 | |
| Suse | — | suse-upgrade-libjavascriptcoregtk-4_0-18suse-upgrade-libjavascriptcoregtk-4_0-18-32bitsuse-upgrade-libjavascriptcoregtk-4_1-0suse-upgrade-libjavascriptcoregtk-5_0-0suse-upgrade-libwebkit2gtk-4_0-37suse-upgrade-libwebkit2gtk-4_0-37-32bitsuse-upgrade-libwebkit2gtk-4_1-0suse-upgrade-libwebkit2gtk-5_0-0suse-upgrade-libwebkit2gtk3-langsuse-upgrade-typelib-1_0-javascriptcore-4_0suse-upgrade-typelib-1_0-javascriptcore-4_1suse-upgrade-typelib-1_0-javascriptcore-5_0suse-upgrade-typelib-1_0-webkit2-4_0suse-upgrade-typelib-1_0-webkit2-4_1suse-upgrade-typelib-1_0-webkit2-5_0suse-upgrade-typelib-1_0-webkit2webextension-4_0suse-upgrade-typelib-1_0-webkit2webextension-4_1suse-upgrade-webkit-jsc-4suse-upgrade-webkit2gtk-4-1-langsuse-upgrade-webkit2gtk-4_0-injected-bundlessuse-upgrade-webkit2gtk-4_1-injected-bundlessuse-upgrade-webkit2gtk-5-0-langsuse-upgrade-webkit2gtk-5_0-injected-bundlessuse-upgrade-webkit2gtk3-develsuse-upgrade-webkit2gtk3-minibrowsersuse-upgrade-webkit2gtk3-soup2-devel | Jan 21, 2022 | Oct 28, 2021 |
| Ubuntu | ubuntu-upgrade-webkit2gtk | Nov 19, 2024 | Oct 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub