Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-22629. PoCs published by lck0.
AI-analyzed exploit summary This PoC demonstrates a heap buffer overflow in Safari's WebGL implementation (CVE-2022-22629) by exploiting the WEBGL_multi_draw extension. It crashes the WebContent process by manipulating offsets and draw counts to render past buffer bounds.
Description
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.
Exploits (1)
This PoC demonstrates a heap buffer overflow in Safari's WebGL implementation (CVE-2022-22629) by exploiting the WEBGL_multi_draw extension. It crashes the WebContent process by manipulating offsets and draw counts to render past buffer bounds.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H