CVE-2022-46691: 
Apple Safari vulnerability analysis and mitigation

CVE-2022-46691 is a memory consumption vulnerability in WebKit that was disclosed in December 2022. The vulnerability affects multiple Apple products including Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2, iPadOS 15.7.2, iOS 16.2, iPadOS 16.2, and watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution (Apple Security, CVE MITRE).

The vulnerability stems from a memory consumption issue in WebKit, Apple's browser engine. The issue was addressed with improved memory handling in WebKit Bugzilla: 245466. The vulnerability was discovered by ChengGang Wu, Yan Kang, YuHao Hu, Yue Sun, Jiming Wang, JiKai Ren and Hang Shu of Institute of Computing Technology, Chinese Academy of Sciences (Apple Security).

When exploited, this vulnerability allows processing of maliciously crafted web content that may lead to arbitrary code execution. This poses a significant security risk as it could allow attackers to execute unauthorized code on affected devices (Apple Security).

Apple has addressed this vulnerability by implementing improved memory handling in the affected products. Users are advised to update to Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2, iPadOS 15.7.2, iOS 16.2, iPadOS 16.2, or watchOS 9.2 depending on their device (Apple Security, CVE MITRE).