First published: Wed Sep 16 2020(Updated: )
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.
Credit: zhunki product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Cloud Pak for Security (CP4S) | <=1.7.2.0 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.1.0 | |
IBM Cloud Pak for Security (CP4S) | <=1.7.0.0 | |
debian/webkit2gtk | 2.44.2-1~deb11u1 2.44.3-1~deb11u1 2.44.2-1~deb12u1 2.44.3-1~deb12u1 2.44.3-1 2.44.4-1 | |
debian/wpewebkit | 2.38.6-1~deb11u1 2.38.6-1 2.44.3-1 2.44.4-1 | |
tvOS | <14.0 | 14.0 |
Apple Mobile Safari | <14.0 | 14.0 |
Apple iOS, iPadOS, and watchOS | <14.0 | 14.0 |
Apple iOS, iPadOS, and watchOS | <14.0 | 14.0 |
Apple iOS, iPadOS, and watchOS | <7.0 | 7.0 |
Apple iTunes | <12.10.9 | 12.10.9 |
Apple iCloud | <11.5 | 11.5 |
Apple iCloud for Windows | =11.5 | |
Apple iTunes for Windows | =12.10.9 | |
Apple Mobile Safari | <14.0 | |
Apple iOS, iPadOS, and watchOS | <14.0 | |
iOS | <14.0 | |
tvOS | =14.0 | |
Apple iOS, iPadOS, and watchOS | =7.0 | |
Fedora | =32 | |
Fedora | =33 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2020-9983 is a vulnerability in WebKit that allows an attacker to perform an out-of-bounds write.
The severity of CVE-2020-9983 is not specified in the provided information.
CVE-2020-9983 affects Apple tvOS 14.0, Apple Safari 14.0, Apple iOS 14.0, Apple iPadOS 14.0, Apple watchOS 7.0, Apple iCloud for Windows 11.5, and Apple iTunes for Windows 12.10.9.
To fix CVE-2020-9983, update your affected software to the recommended versions provided by Apple.
You can find more information about CVE-2020-9983 on the Apple support page: [https://support.apple.com/en-us/HT211845](https://support.apple.com/en-us/HT211845)