CVE-2020-9947

CWE-416 — Use After Free9 documents7 sources
Severity
8.8HIGH
EPSS
0.8%
top 25.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Apple Icloud FOR WindowsApple IOS AND IpadosApple Itunes FOR Windows+7 more
Timeline
PublishedDec 8
Latest updateMay 24

Description

A use after free issue was addressed with improved memory management. This issue is fixed in watchOS 7.0, iOS 14.0 and iPadOS 14.0, iTunes for Windows 12.10.9, iCloud for Windows 11.5, tvOS 14.0, Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages15 packages

▶CVEListV5apple/icloud_for_windowsunspecified — 11.5
▶CVEListV5apple/itunes_for_windowsunspecified — 12.10
▶CVEListV5apple/tvosunspecified — 14.0
▶NVDapple/tvos< 14.0
▶CVEListV5apple/safariunspecified — 14.0

🔴Vulnerability Details

3
GHSA
GHSA-xvmv-wg5c-7x3w: A use after free issue was addressed with improved memory management↗2022-05-24
▶
CVEList
CVE-2020-9947: A use after free issue was addressed with improved memory management↗2020-12-08
▶
OSV
CVE-2020-9947: A use after free issue was addressed with improved memory management↗2020-12-08
▶

📋Vendor Advisories

5
Red Hat
webkitgtk: use after free issue may lead to arbitrary code execution↗2021-03-22
▶
Apple
CVE-2020-9947: iTunes 12.10.9 for Windows↗2020-09-16
▶
Apple
CVE-2020-9947: tvOS 14.0↗2020-09-16
▶
Apple
CVE-2020-9947: watchOS 7.0↗2020-09-16
▶
Debian
CVE-2020-9947: webkit2gtk - A use after free issue was addressed with improved memory management. This issue...↗2020
▶
CVE-2020-9947 (HIGH CVSS 8.8) | A use after free issue was addresse | cvebase.io