high8.8
CVE-2020-9948
A type confusion issue was addressed with improved memory handling.
Impact
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Safari | before 14.0 |
| Webkit | Webkitgtk\+ | through 2.30.3 |
| Debian | Debian Linux | Version 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://security.gentoo.org/glsa/202012-10
- https://support.apple.com/HT211845
- https://www.debian.org/security/2020/dsa-4797
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://security.gentoo.org/glsa/202012-10
- https://support.apple.com/HT211845
- https://www.debian.org/security/2020/dsa-4797