Vulnerability Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
CVSS Score
8.8
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 14.0 |
| Webkit | Webkitgtk\+ | <= 2.30.3 |
| Debian | Debian Linux | 10.0 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2020/Nov/18Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/11/23/3Mailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202012-10Third Party Advisory
- https://support.apple.com/HT211845Release NotesVendor Advisory
- https://www.debian.org/security/2020/dsa-4797Third Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/18Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/11/23/3Mailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202012-10Third Party Advisory
- https://support.apple.com/HT211845Release NotesVendor Advisory
- https://www.debian.org/security/2020/dsa-4797Third Party Advisory
FAQ
What is CVE-2020-9948?
CVE-2020-9948 is a vulnerability with a CVSS score of 8.8 (HIGH). A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution.
How severe is CVE-2020-9948?
CVE-2020-9948 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-9948?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Safari, Webkit Webkitgtk\+, Debian Debian Linux.