CVE-2022-32888
- Source
- https://cve.org/CVERecord?id=CVE-2022-32888
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32888.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-32888
- Downstream
- Related
- Published
- 2022-11-01T20:15:18.587Z
- Modified
- 2026-02-14T00:55:03.185435Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 and iPadOS 15.7, watchOS 9, macOS Monterey 12.6, tvOS 16. Processing maliciously crafted web content may lead to arbitrary code execution.
- References
-
- http://www.openwall.com/lists/oss-security/2022/11/04/4
- https://security.gentoo.org/glsa/202305-32
- https://support.apple.com/en-us/HT213443
- https://support.apple.com/en-us/HT213444
- https://support.apple.com/en-us/HT213445
- https://support.apple.com/en-us/HT213446
- https://support.apple.com/en-us/HT213486
- https://support.apple.com/en-us/HT213487
- https://support.apple.com/en-us/HT213488
- http://www.openwall.com/lists/oss-security/2022/11/04/4
Affected packages
Git / github.com/nodejs/node
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nodejs/node
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixed