CVE-2019-8607

webkitgtk: Out-of-bounds read leading to memory disclosure

Published Dec 18, 2019 CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2019-17997 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.
Ubuntu USN Ubuntu USN USN-3992-1 WebKitGTK+ vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 4, 2024, 9:24 PM
Reserved
Feb 18, 2019, 12:00 AM
Status
Modified
Published
Dec 18, 2019, 6:15 PM
Modified
Jun 17, 2026, 2:42 AM
Severity
Moderate
Public date
May 20, 2019, 12:00 AM