CVE-2020-9983

Description (CNA)

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• https://support.apple.com/kb/HT211843
• https://support.apple.com/kb/HT211850
• https://support.apple.com/kb/HT211844
• https://support.apple.com/HT211845
• https://support.apple.com/kb/HT211952
• http://seclists.org/fulldisclosure/2020/Nov/18
• http://seclists.org/fulldisclosure/2020/Nov/19
• http://seclists.org/fulldisclosure/2020/Nov/20
• http://seclists.org/fulldisclosure/2020/Nov/22
• http://www.openwall.com/lists/oss-security/2020/11/23/3
• https://www.debian.org/security/2020/dsa-4797
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/
• https://support.apple.com/kb/HT211935
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/
• https://security.gentoo.org/glsa/202012-10

ADP enrichment