CVE-2019-8808
published 2019-12-18CVE-2019-8808: Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari…
high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | >= unspecified < iOS 13.2 and iPadOS 13.2 | iOS 13.2 and iPadOS 13.2 |
| apple | ios_13.2_and_ipados | — | — |
| apple | ipados | < 13.2 | 13.2 |
| apple | iphone_os | < 13.2 | 13.2 |
| apple | itunes | < 12.10.2 | 12.10.2 |
| apple | itunes_12.10.2_for_windows | — | — |
| apple | itunes_for_windows | >= unspecified < iTunes for Windows 12.10.2 | iTunes for Windows 12.10.2 |
| apple | safari | < 13.0.3 | 13.0.3 |
| apple | safari | — | — |
| apple | safari | >= unspecified < Safari 13.0.3 | Safari 13.0.3 |
| apple | tvos | < 13.2 | 13.2 |
| apple | tvos | — | — |
| apple | tvos | >= unspecified < tvOS 13.2 | tvOS 13.2 |
| apple | watchos | < 6.1 | 6.1 |
| apple | watchos | — | — |
| apple | watchos | >= unspecified < watchOS 6.1 | watchOS 6.1 |
| debian | webkit2gtk | < webkit2gtk 2.26.0-1 (bookworm) | webkit2gtk 2.26.0-1 (bookworm) |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH