high8.8
CVE-2020-9983
An out-of-bounds write issue was addressed with improved bounds checking.
Impact
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Icloud | Version 11.5 |
| Apple | Itunes | Version 12.10.9 |
| Apple | Safari | before 14.0 |
| Apple | Ipados | before 14.0 |
| Apple | Iphone Os | before 14.0 |
| Apple | Tvos | Version 14.0 |
| Apple | Watchos | Version 7.0 |
| Fedoraproject | Fedora | Versions 32, 33 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/
- https://security.gentoo.org/glsa/202012-10
- https://support.apple.com/HT211845
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211844
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211935
- https://support.apple.com/kb/HT211952
- https://www.debian.org/security/2020/dsa-4797
- http://seclists.org/fulldisclosure/2020/Nov/18
- http://seclists.org/fulldisclosure/2020/Nov/19
- http://seclists.org/fulldisclosure/2020/Nov/20
- http://seclists.org/fulldisclosure/2020/Nov/22
- http://www.openwall.com/lists/oss-security/2020/11/23/3
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/
- https://security.gentoo.org/glsa/202012-10
- https://support.apple.com/HT211845
- https://support.apple.com/kb/HT211843