ZDI-23-646: Apple WebKit WebGL2 drawRangeElements Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple WebKit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-646?
The severity of ZDI-23-646 is classified as medium, as it requires user interaction and affects sensitive information disclosure.
How do I fix ZDI-23-646?
To fix ZDI-23-646, ensure that you update Apple WebKit to the latest version provided by Apple.
What types of sensitive information could be disclosed by ZDI-23-646?
ZDI-23-646 could potentially disclose user data such as browsing history and cookies.
What are the conditions required to exploit ZDI-23-646?
Exploitation of ZDI-23-646 requires user interaction, such as visiting a malicious webpage or opening a compromised file.
Which versions of Apple WebKit are affected by ZDI-23-646?
All affected installations of Apple WebKit are susceptible to ZDI-23-646 regardless of specific version details.