CVE-2022-22629

HIGH

macOS Monterey <12.3 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-22629. PoCs published by lck0.

AI-analyzed exploit summary This PoC demonstrates a heap buffer overflow in Safari's WebGL implementation (CVE-2022-22629) by exploiting the WEBGL_multi_draw extension. It crashes the WebContent process by manipulating offsets and draw counts to render past buffer bounds.

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution.

Exploits (1)

nomisec WORKING POC
by lck0 · poc
https://github.com/lck0/CVE-2022-22629

This PoC demonstrates a heap buffer overflow in Safari's WebGL implementation (CVE-2022-22629) by exploiting the WEBGL_multi_draw extension. It crashes the WebContent process by manipulating offsets and draw counts to render past buffer bounds.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: Safari 15.0-15.3 (iOS/macOS)
No auth needed
Prerequisites: WebGL2 support · WEBGL_multi_draw extension availability
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213182
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213193
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213183
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213186
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213188
Release Notes, Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT213187

Scores

CVSS v3 8.8
EPSS 0.3355
EPSS Percentile 97.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (7)
apple/ipados < 15.4
apple/iphone_os < 15.4
apple/itunes < 12.12.3
apple/macos 12.0.0 - 12.3
apple/safari < 15.4
apple/tvos < 15.4
apple/watchos < 8.5
Published Sep 23, 2022
Tracked Since Feb 18, 2026