An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3-develUpgrade gnome-desktop3Upgrade libpurpleUpgrade libpurple-develUpgrade gdk-pixbuf2Upgrade pidginUpgrade pidgin-develUpgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-xlib | May 4, 2022 | Dec 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jscUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-docUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Nov 12, 2020 | Dec 18, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jun 7, 2019 | Jun 7, 2019 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | May 14, 2019 | May 14, 2019 |
| Apple Safari | — | Upgrade to Apple Safari version 12.1.1Uninstall Apple Safari on Windows | May 14, 2019 | May 14, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 18, 2019 |
| Centos_linux | — | Upgrade plymouth-theme-spinfinityUpgrade gsettings-desktop-schemasUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gvfs-develUpgrade appstream-dataUpgrade webkit2gtk3-jsc-develUpgrade finch-debuginfoUpgrade accountsservice-debuginfoUpgrade gvfs-afcUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade evince-nautilus-debuginfoUpgrade evince-nautilusUpgrade gtk3-develUpgrade gnome-shell-debugsourceUpgrade gvfs-afpUpgrade gnome-classic-sessionUpgrade plymouth-plugin-two-stepUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gnome-desktop3-develUpgrade gnome-control-center-debuginfoUpgrade webkitgtk4-debuginfoUpgrade plymouth-core-libs-debuginfoUpgrade baobabUpgrade evince-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-tweaksUpgrade gtk3-devel-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade mozjs60-debugsourceUpgrade libpurple-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-immodule-xim-debuginfoUpgrade plymouth-plugin-throbgressUpgrade gnome-settings-daemon-debugsourceUpgrade gtk-update-icon-cacheUpgrade gvfs-debuginfoUpgrade nautilus-extensionsUpgrade gjsUpgrade gnome-shellUpgrade plymouth-system-themeUpgrade SDLUpgrade evince-browser-pluginUpgrade gnome-settings-daemonUpgrade gtk3-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gvfsUpgrade accountsservice-libsUpgrade webkit2gtk3-develUpgrade gtk-update-icon-cache-debuginfoUpgrade gnome-shell-extension-desktop-iconsUpgrade gdk-pixbuf2-debuginfoUpgrade SDL-debugsourceUpgrade plymouth-plugin-two-step-debuginfoUpgrade plymouth-scriptsUpgrade gnome-shell-extension-places-menuUpgrade gnome-desktop3-debuginfoUpgrade gvfs-goaUpgrade file-roller-debuginfoUpgrade nautilus-debuginfoUpgrade gdk-pixbuf2-modulesUpgrade libpurpleUpgrade gvfs-client-debuginfoUpgrade nautilusUpgrade gtk3-tests-debuginfoUpgrade libpurple-perl-debuginfoUpgrade gvfs-mtpUpgrade gnome-software-editor-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-remote-desktopUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-extension-window-listUpgrade gnome-control-center-filesystemUpgrade gvfs-fuseUpgrade gnome-shell-extension-no-hot-cornerUpgrade gdm-debugsourceUpgrade webkit2gtk3-jsc-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade gnome-software-editorUpgrade plymouthUpgrade evince-libsUpgrade libpurple-tcl-debuginfoUpgrade pidgin-perl-debuginfoUpgrade webkitgtk4-jsc-develUpgrade plymouth-theme-spinnerUpgrade SDL-debuginfoUpgrade mozjs60-debuginfoUpgrade gnome-software-debuginfoUpgrade gvfs-debugsourceUpgrade baobab-debuginfoUpgrade gjs-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade gvfs-smbUpgrade gtk3-immodule-ximUpgrade plymouth-theme-fade-inUpgrade gnome-settings-daemon-debuginfoUpgrade gjs-tests-debuginfoUpgrade nautilus-debugsourceUpgrade gnome-shell-debuginfoUpgrade gvfs-gphoto2Upgrade plymouth-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade webkitgtk4-jscUpgrade evince-libs-debuginfoUpgrade gnome-desktop3-tests-debuginfoUpgrade pangoUpgrade accountsserviceUpgrade gvfs-archiveUpgrade SDL-develUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade plymouth-theme-solarUpgrade pango-tests-debuginfoUpgrade file-roller-debugsourceUpgrade gnome-desktop3Upgrade gnome-remote-desktop-debugsourceUpgrade plymouth-plugin-script-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-plugin-process-gtk2Upgrade mozjs60Upgrade plymouth-plugin-throbgress-debuginfoUpgrade pango-debuginfoUpgrade evince-debuginfoUpgrade wayland-protocols-develUpgrade mutterUpgrade gvfs-smb-debuginfoUpgrade gnome-shell-extension-apps-menuUpgrade gtk3-debugsourceUpgrade gvfs-archive-debuginfoUpgrade gdk-pixbuf2-develUpgrade plymouth-plugin-scriptUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade plymouth-plugin-label-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade webkitgtk4-docUpgrade mutter-debuginfoUpgrade gdmUpgrade plymouth-graphics-libsUpgrade gsettings-desktop-schemas-develUpgrade gnome-control-center-debugsourceUpgrade gnome-shell-extension-user-themeUpgrade gdk-pixbuf2-debugsourceUpgrade gdk-pixbuf2Upgrade chrome-gnome-shellUpgrade mutter-debugsourceUpgrade plymouth-devel-debuginfoUpgrade gnome-softwareUpgrade pango-develUpgrade gtk3Upgrade gtk3-immodules-debuginfoUpgrade plymouth-theme-chargeUpgrade mutter-tests-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade pango-debugsourceUpgrade gdm-debuginfoUpgrade pidgin-debuginfoUpgrade gvfs-afc-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade pidgin-debugsourceUpgrade file-rollerUpgrade accountsservice-debugsourceUpgrade gnome-software-debugsourceUpgrade pidginUpgrade gvfs-mtp-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade webkit2gtk3-debugsourceUpgrade gvfs-fuse-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gvfs-clientUpgrade webkitgtk4Upgrade accountsservice-libs-debuginfoUpgrade plymouth-core-libsUpgrade gjs-debugsourceUpgrade plymouth-theme-scriptUpgrade gvfs-afp-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade baobab-debugsourceUpgrade gnome-shell-extension-launch-new-instanceUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-systemMonitorUpgrade gnome-shell-extension-commonUpgrade plymouth-debugsourceUpgrade webkitgtk4-develUpgrade evinceUpgrade gnome-control-centerUpgrade plymouth-plugin-labelUpgrade gnome-shell-extension-dash-to-dockUpgrade webkit2gtk3-debuginfoUpgrade plymouth-graphics-libs-debuginfoUpgrade plymouth-plugin-fade-throbber | Sep 17, 2020 | Dec 18, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Dec 18, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-develUpgrade webkitgtk4Upgrade webkitgtk4-jscUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-doc | Oct 7, 2020 | May 20, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 18, 2019 |
| Redhat_linux | — | Upgrade pidgin-develUpgrade webkitgtk4-debuginfoUpgrade webkitgtk4-jsc-develUpgrade gnome-shell-extension-desktop-iconsUpgrade gtk-update-icon-cache-debuginfoUpgrade gvfs-clientUpgrade mutter-debuginfoUpgrade mozjs60-debugsourceUpgrade gnome-desktop3-debuginfoUpgrade gjsUpgrade plymouth-plugin-script-debuginfoUpgrade gvfs-afcUpgrade evinceUpgrade gdk-pixbuf2-modulesUpgrade pidgin-perl-debuginfoUpgrade gnome-desktop3-develUpgrade webkit2gtk3-devel-debuginfoUpgrade gvfs-mtpUpgrade gnome-shell-extension-user-themeUpgrade gtk3-debugsourceUpgrade SDL-debugsourceUpgrade gtk3-tests-debuginfoUpgrade baobab-debugsourceUpgrade plymouth-theme-spinnerUpgrade webkitgtk4Upgrade gnome-remote-desktop-debugsourceUpgrade gvfs-afpUpgrade gvfs-debugsourceUpgrade plymouth-plugin-space-flares-debuginfoUpgrade evince-browser-plugin-debuginfoUpgrade gtk3Upgrade gdk-pixbuf2-tests-debuginfoUpgrade gjs-tests-debuginfoUpgrade gtk3-immodules-debuginfoUpgrade nautilus-debuginfoUpgrade gnome-remote-desktopUpgrade baobabUpgrade webkitgtk4-docUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade accountsservice-libsUpgrade mutter-debugsourceUpgrade gnome-shellUpgrade pidginUpgrade plymouth-plugin-label-debuginfoUpgrade pango-debugsourceUpgrade gnome-shell-extension-window-grouperUpgrade gnome-control-center-filesystemUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gnome-shell-extension-commonUpgrade plymouth-core-libsUpgrade gvfs-archive-debuginfoUpgrade plymouth-plugin-throbgressUpgrade gdmUpgrade gtk3-immodule-xim-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade gnome-shell-extension-panel-favoritesUpgrade gnome-shell-debugsourceUpgrade webkit2gtk3-debugsourceUpgrade webkit2gtk3-jscUpgrade libpurple-debuginfoUpgrade gtk3-debuginfoUpgrade nautilusUpgrade webkit2gtk3-jsc-debuginfoUpgrade evince-debugsourceUpgrade plymouth-plugin-fade-throbberUpgrade evince-browser-pluginUpgrade gnome-shell-extension-no-hot-cornerUpgrade libpurpleUpgrade gnome-shell-extension-dash-to-dockUpgrade mutter-develUpgrade gnome-shell-extension-places-menuUpgrade SDLUpgrade gnome-classic-sessionUpgrade gnome-shell-extension-windowsNavigatorUpgrade gdk-pixbuf2Upgrade evince-nautilus-debuginfoUpgrade baobab-debuginfoUpgrade gdm-debugsourceUpgrade plymouth-plugin-two-step-debuginfoUpgrade gdk-pixbuf2-debuginfoUpgrade webkit2gtk3-jsc-develUpgrade SDL-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gvfs-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade gnome-shell-extension-window-listUpgrade gnome-settings-daemonUpgrade libpurple-perl-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gvfs-afc-debuginfoUpgrade gvfs-develUpgrade finch-debuginfoUpgrade gtk-update-icon-cacheUpgrade gtk3-develUpgrade appstream-dataUpgrade plymouth-plugin-two-stepUpgrade gnome-software-debuginfoUpgrade plymouth-plugin-space-flaresUpgrade file-roller-debugsourceUpgrade webkit2gtk3Upgrade file-roller-debuginfoUpgrade plymouth-debugsourceUpgrade gnome-shell-extension-apps-menuUpgrade accountsservice-develUpgrade plymouth-theme-chargeUpgrade accountsservice-debugsourceUpgrade accountsserviceUpgrade plymouth-devel-debuginfoUpgrade gvfs-gphoto2Upgrade webkit2gtk3-develUpgrade mutter-tests-debuginfoUpgrade gvfs-client-debuginfoUpgrade gnome-desktop3Upgrade gnome-settings-daemon-debuginfoUpgrade pangoUpgrade evince-nautilusUpgrade plymouth-scriptsUpgrade gvfs-smbUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade file-rollerUpgrade gnome-software-editorUpgrade pango-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gnome-control-center-debuginfoUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-desktop3-debugsourceUpgrade mozjs60-debuginfoUpgrade evince-debuginfoUpgrade gvfs-goa-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade plymouth-theme-scriptUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade gtk3-immodule-ximUpgrade gnome-shell-extension-auto-move-windowsUpgrade gnome-softwareUpgrade evince-libsUpgrade gsettings-desktop-schemasUpgrade SDL-develUpgrade gvfs-archiveUpgrade gnome-remote-desktop-debuginfoUpgrade libpurple-develUpgrade nautilus-develUpgrade evince-libs-debuginfoUpgrade chrome-gnome-shellUpgrade gnome-shell-extension-top-iconsUpgrade accountsservice-debuginfoUpgrade gnome-control-center-debugsourceUpgrade plymouth-theme-spinfinityUpgrade plymouth-system-themeUpgrade plymouth-graphics-libsUpgrade mutterUpgrade gnome-software-debugsourceUpgrade webkitgtk4-develUpgrade gnome-shell-extension-systemMonitorUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gvfs-afp-debuginfoUpgrade gnome-control-centerUpgrade gdk-pixbuf2-debugsourceUpgrade plymouth-core-libs-debuginfoUpgrade gdk-pixbuf2-develUpgrade pidgin-debugsourceUpgrade gvfs-smb-debuginfoUpgrade gnome-software-editor-debuginfoNo solution existsUpgrade plymouth-plugin-labelUpgrade nautilus-extensions-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade plymouth-plugin-scriptUpgrade plymouthUpgrade nautilus-debugsourceUpgrade accountsservice-libs-debuginfoUpgrade libpurple-tcl-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gvfs-goaUpgrade gdm-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade plymouth-graphics-libs-debuginfoUpgrade pango-develUpgrade gnome-desktop3-tests-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade wayland-protocols-develUpgrade pango-tests-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade plymouth-debuginfoUpgrade gnome-tweaksUpgrade gjs-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade mozjs60-develUpgrade gvfsUpgrade webkitgtk4-jscUpgrade plymouth-theme-fade-inUpgrade gdk-pixbuf2-xlib-develUpgrade mozjs60Upgrade plymouth-theme-solarUpgrade gvfs-fuseUpgrade gtk3-devel-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade gjs-develUpgrade pidgin-debuginfoUpgrade nautilus-extensionsUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade webkit2gtk3-debuginfoUpgrade gjs-debugsource | Sep 17, 2020 | Dec 18, 2019 |
| Rocky_linux | — | Upgrade gdk-pixbuf2-develUpgrade pidgin-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade pango-debuginfoUpgrade pango-develUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3Upgrade gdk-pixbuf2-debugsourceUpgrade libpurple-develUpgrade pangoUpgrade pidgin-debugsourceUpgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2-xlibUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade libpurpleUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade pidgin-develUpgrade libpurple-debuginfoUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-modulesUpgrade pango-debugsourceUpgrade pidgin | Mar 12, 2024 | Dec 18, 2019 |
| Suse | — | Upgrade webkit2gtk3-develUpgrade webkit-jsc-4Upgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk3-plugin-process-gtk2Upgrade libjavascriptcoregtk-4_0-18-32bitUpgrade libwebkit2gtk-4_0-37Upgrade libwebkit2gtk-4_0-37-32bitUpgrade webkit2gtk3-minibrowserUpgrade typelib-1_0-javascriptcore-4_0Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_0-18Upgrade typelib-1_0-webkit2-4_0Upgrade typelib-1_0-webkit2webextension-4_0 | Jul 16, 2019 | May 22, 2019 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | May 23, 2019 | May 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub