First published: Wed Sep 16 2020(Updated: )
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
Credit: zhunki product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/webkit2gtk | 2.44.2-1~deb11u1 2.44.3-1~deb11u1 2.44.2-1~deb12u1 2.44.3-1~deb12u1 2.44.3-1 2.44.4-1 | |
debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.44.3-1 2.44.4-1 | |
tvOS | <14.0 | 14.0 |
Apple iOS, iPadOS, and watchOS | <7.0 | 7.0 |
Apple iCloud | <11.5 | 11.5 |
IBM Cloud Pak for Security | <=1.7.2.0 | |
IBM Cloud Pak for Security | <=1.7.1.0 | |
IBM Cloud Pak for Security | <=1.7.0.0 | |
iTunes | <12.10.9 | 12.10.9 |
Safari | <14.0 | 14.0 |
Apple iOS and iPadOS | <14.0 | 14.0 |
Apple iOS, iPadOS, and macOS | <14.0 | 14.0 |
iCloud for Windows | =11.5 | |
iTunes | =12.10.9 | |
Safari | <14.0 | |
Apple iOS, iPadOS, and macOS | <14.0 | |
iPhone OS | <14.0 | |
tvOS | =14.0 | |
Apple iOS, iPadOS, and watchOS | =7.0 | |
Red Hat Fedora | =32 | |
Red Hat Fedora | =33 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2020-9983 is a vulnerability in WebKit that allows an attacker to perform an out-of-bounds write.
The severity of CVE-2020-9983 is not specified in the provided information.
CVE-2020-9983 affects Apple tvOS 14.0, Apple Safari 14.0, Apple iOS 14.0, Apple iPadOS 14.0, Apple watchOS 7.0, Apple iCloud for Windows 11.5, and Apple iTunes for Windows 12.10.9.
To fix CVE-2020-9983, update your affected software to the recommended versions provided by Apple.
You can find more information about CVE-2020-9983 on the Apple support page: [https://support.apple.com/en-us/HT211845](https://support.apple.com/en-us/HT211845)