Apple WebKit Integer Overflow Vulnerability Allowing Arbitrary Code Execution

A vulnerability exists in the WebKit component of multiple Apple products, including iOS, iPadOS, macOS Monterey, tvOS, and watchOS. This vulnerability is an integer overflow that was introduced through the processing of maliciously crafted web content. The issue has been addressed with improved input validation. However, the vulnerability could be exploited to execute arbitrary code on the affected device.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected device.

Remediation

Users can update to the latest versions of the affected operating systems and applications. Instructions for updating can be found on the Apple Support website. For specific guidance on updating WebKitGTK or WPE WebKit, refer to the respective security advisory pages.