high8.8
CVE-2020-9951
A use after free issue was addressed with improved memory management.
Impact
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Icloud | before 11.5 |
| Apple | Itunes | before 12.10.9 |
| Apple | Safari | before 14.0 |
| Apple | Ipados | before 14.0 |
| Apple | Iphone Os | before 14.0 |
| Apple | Tvos | before 14.0 |
| Apple | Watchos | before 7.0 |
| Webkit | Webkitgtk\+ | through 2.30.3 |
| Debian | Debian Linux | Version 10.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://security.gentoo.org/glsa/202012-10
- https://support.apple.com/HT211845
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211844
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211935
- https://support.apple.com/kb/HT211952
- https://www.debian.org/security/2020/dsa-4797
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://security.gentoo.org/glsa/202012-10
- https://support.apple.com/HT211845
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211844
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211935
- https://support.apple.com/kb/HT211952