Apple iOS/iPadOS Web type confusion

Summaryinfo

A vulnerability was found in Apple iOS and iPadOS and classified as critical. This vulnerability affects unknown code of the component Web Handler. Such manipulation leads to type confusion. This vulnerability is listed as CVE-2024-23222. The attack may be performed from remote. In addition, an exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in Apple iOS and iPadOS (Smartphone Operating System) (the affected version is unknown). It has been rated as critical. Affected by this issue is an unknown code of the component Web Handler. The manipulation with an unknown input leads to a type confusion vulnerability. Using CWE to declare the problem leads to CWE-843. The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A type confusion issue was addressed with improved checks. This issue is fixed in Safari 17.3, iOS 15.8.7 and iPadOS 15.8.7, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3, macOS Monterey 12.7.3, macOS Sonoma 14.3, macOS Ventura 13.6.4, tvOS 17.3, visionOS 1.0.2. Processing maliciously crafted web content may lead to arbitrary code execution. This fix associated with the Coruna exploit was shipped in iOS 17.3 on January 22, 2024. This update brings that fix to devices that cannot update to the latest iOS version.

The weakness was presented 01/23/2024. The advisory is available at support.apple.com. This vulnerability is handled as CVE-2024-23222 since 01/12/2024. Successful exploitation requires user interaction by the victim. Technical details are unknown but an exploit is available. The structure of the vulnerability defines a possible price range of USD $5k-$25k at the moment (estimation calculated on 04/02/2026). It is expected to see the exploit prices for this product increasing in the near future.

It is declared as attacked. The vulnerability scanner Nessus provides a plugin with the ID 209834 (SUSE SLES12 Security Update : webkit2gtk3 (SUSE-SU-2024:3751-1)), which helps to determine the existence of the flaw in a target environment. This issue was added on 01/23/2024 to the CISA Known Exploited Vulnerabilities Catalog with a due date of 02/13/2024:

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the databases at Zero-Day.cz (851), Tenable (209834) and CERT Bund (WID-SEC-2026-0705). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Affected

• Apple iOS
• Apple iPadOS

Productinfo

Type

• Smartphone Operating System

Vendor

• Apple

Name

• iOS
• iPadOS

License

• commercial

Website

• Vendor: https://www.apple.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion