CVE-2023-28198
14.08.2023, 23:15
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 16.4 and iPadOS 16.4, macOS Ventura 13.3. Processing web content may lead to arbitrary code execution.Enginsight
Vendor | Product | Version |
---|---|---|
apple | ipados | 𝑥 < 16.4 |
apple | iphone_os | 𝑥 < 16.4 |
apple | macos | 13.0 ≤ 𝑥 < 13.3 |
webkitgtk | webkitgtk | 𝑥 < 2.40.1 |
wpewebkit | wpe_webkit | 𝑥 < 2.40.1 |
𝑥
= Vulnerable software versions

Debian Releases
Debian Product | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
webkit2gtk |
| ||||||||||||
wpewebkit |
|

Ubuntu Releases
Ubuntu Product | |||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
qtwebkit-opensource-src |
| ||||||||||||||||
qtwebkit-source |
| ||||||||||||||||
webkit2gtk |
| ||||||||||||||||
webkitgtk |
| ||||||||||||||||
wpewebkit |
|
Common Weakness Enumeration
References