An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlibUpgrade pidgin-develUpgrade pidginUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2Upgrade libpurpleUpgrade gnome-desktop3-develUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-desktop3Upgrade libpurple-devel | May 4, 2022 | Dec 18, 2019 |
| Amazon Linux Ami 2 | — | Upgrade webkitgtk4-jscUpgrade webkitgtk4-docUpgrade webkitgtk4Upgrade webkitgtk4-develUpgrade webkitgtk4-jsc-develUpgrade webkitgtk4-debuginfo | Nov 12, 2020 | Dec 18, 2019 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Jun 7, 2019 | Jun 7, 2019 |
| Apple Osx Webkit | — | Upgrade macOS to the latest version | May 14, 2019 | May 14, 2019 |
| Apple Safari | — | Uninstall Apple Safari on WindowsUpgrade to Apple Safari version 12.1.1 | May 14, 2019 | May 14, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Dec 18, 2019 |
| Centos_linux | — | Upgrade gvfs-smb-debuginfoUpgrade gnome-shell-extension-native-window-placementUpgrade plymouth-plugin-label-debuginfoUpgrade plymouth-plugin-scriptUpgrade gvfs-clientUpgrade wayland-protocols-develUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade gtk3-debugsourceUpgrade nautilus-debugsourceUpgrade mutterUpgrade evince-libs-debuginfoUpgrade gvfs-archive-debuginfoUpgrade plymouth-debugsourceUpgrade gjs-debugsourceUpgrade webkitgtk4-jscUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade accountsservice-debugsourceUpgrade evince-debuginfoUpgrade gvfs-goa-debuginfoUpgrade baobab-debugsourceUpgrade plymouth-core-libsUpgrade nautilus-extensions-debuginfoUpgrade accountsservice-libs-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade gvfs-afp-debuginfoUpgrade plymouth-theme-scriptUpgrade webkitgtk4-develUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade plymouth-graphics-libs-debuginfoUpgrade pidgin-debugsourceUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-shell-extension-commonUpgrade plymouth-devel-debuginfoUpgrade webkit2gtk3Upgrade webkit2gtk3-debuginfoUpgrade gdk-pixbuf2-tests-debuginfoUpgrade gdk-pixbuf2-develUpgrade plymouth-theme-chargeUpgrade gjs-debuginfoUpgrade webkitgtk4-docUpgrade mutter-debuginfoUpgrade gvfs-afc-debuginfoUpgrade pango-develUpgrade mozjs60Upgrade gvfs-fuse-debuginfoUpgrade evinceUpgrade evince-browser-plugin-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade webkit2gtk3-debugsourceUpgrade gdk-pixbuf2-debugsourceUpgrade plymouth-plugin-fade-throbberUpgrade pangoUpgrade plymouth-plugin-script-debuginfoUpgrade gnome-remote-desktop-debugsourceUpgrade pidginUpgrade gnome-control-centerUpgrade gdm-debuginfoUpgrade gvfs-mtp-debuginfoUpgrade gnome-software-debugsourceUpgrade gnome-shell-debuginfoUpgrade gnome-shell-extension-dash-to-dockUpgrade gvfs-smbUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-shell-extension-workspace-indicatorUpgrade gnome-shell-extension-systemMonitorUpgrade chrome-gnome-shellUpgrade webkitgtk4Upgrade webkit2gtk3-plugin-process-gtk2Upgrade pango-debugsourceUpgrade plymouth-graphics-libsUpgrade gnome-shell-extension-apps-menuUpgrade file-rollerUpgrade gdmUpgrade gnome-desktop3-tests-debuginfoUpgrade gdk-pixbuf2Upgrade gjs-tests-debuginfoUpgrade gnome-softwareUpgrade gnome-settings-daemon-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade mutter-debugsourceUpgrade pidgin-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gtk3-immodules-debuginfoUpgrade gvfs-gphoto2Upgrade pango-debuginfoUpgrade gtk3-immodule-ximUpgrade plymouth-theme-fade-inUpgrade mutter-tests-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade accountsserviceUpgrade gtk3Upgrade gnome-desktop3Upgrade plymouth-plugin-labelUpgrade gnome-control-center-debugsourceUpgrade gvfs-archiveUpgrade file-roller-debugsourceUpgrade plymouth-debuginfoUpgrade pango-tests-debuginfoUpgrade gnome-shell-extension-user-themeUpgrade gnome-shell-extension-auto-move-windowsUpgrade SDL-develUpgrade plymouth-theme-solarUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade evince-nautilus-debuginfoUpgrade gtk3-debuginfoUpgrade gvfs-debugsourceUpgrade file-roller-debuginfoUpgrade gvfs-afcUpgrade gsettings-desktop-schemasUpgrade gnome-shell-extension-places-menuUpgrade SDL-debuginfoUpgrade accountsservice-debuginfoUpgrade plymouth-theme-spinfinityUpgrade gdm-debugsourceUpgrade webkit2gtk3-devel-debuginfoUpgrade gnome-shell-extension-disable-screenshieldUpgrade plymouth-plugin-two-stepUpgrade gtk-update-icon-cache-debuginfoUpgrade gtk3-devel-debuginfoUpgrade evince-nautilusUpgrade gnome-settings-daemonUpgrade gnome-shell-extension-no-hot-cornerUpgrade baobabUpgrade baobab-debuginfoUpgrade gnome-software-debuginfoUpgrade plymouth-core-libs-debuginfoUpgrade webkit2gtk3-develUpgrade webkitgtk4-debuginfoUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gtk3-develUpgrade gnome-control-center-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade plymouth-plugin-throbgressUpgrade SDL-debugsourceUpgrade plymouth-plugin-two-step-debuginfoUpgrade plymouth-scriptsUpgrade gvfs-mtpUpgrade plymouthUpgrade gvfs-client-debuginfoUpgrade gvfs-goaUpgrade gnome-software-editorUpgrade evince-libsUpgrade libpurple-tcl-debuginfoUpgrade gnome-control-center-filesystemUpgrade plymouth-system-themeUpgrade webkit2gtk3-jsc-develUpgrade libpurpleUpgrade plymouth-plugin-space-flaresUpgrade libpurple-perl-debuginfoUpgrade mozjs60-debugsourceUpgrade SDLUpgrade plymouth-theme-spinnerUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-shell-extension-window-listUpgrade gnome-remote-desktopUpgrade gdk-pixbuf2-modulesUpgrade gnome-software-editor-debuginfoUpgrade webkit2gtk3-jsc-debuginfoUpgrade gvfs-gphoto2-debuginfoUpgrade pidgin-perl-debuginfoUpgrade gnome-shellUpgrade accountsservice-libsUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gvfs-fuseUpgrade gnome-settings-daemon-debugsourceUpgrade gnome-shell-extension-horizontal-workspacesUpgrade gtk3-immodule-xim-debuginfoUpgrade gtk3-tests-debuginfoUpgrade gnome-tweaksUpgrade evince-debugsourceUpgrade libpurple-debuginfoUpgrade webkit2gtk3-jscUpgrade gnome-shell-extension-drive-menuUpgrade gvfs-afpUpgrade gdk-pixbuf2-debuginfoUpgrade finch-debuginfoUpgrade nautilus-extensionsUpgrade gvfs-develUpgrade nautilus-debuginfoUpgrade gjsUpgrade appstream-dataUpgrade gvfs-debuginfoUpgrade mozjs60-debuginfoUpgrade gvfsUpgrade gnome-shell-extension-desktop-iconsUpgrade webkitgtk4-jsc-develUpgrade nautilusUpgrade gnome-shell-extension-panel-favoritesUpgrade gtk-update-icon-cacheUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade evince-browser-pluginUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-debugsourceUpgrade gnome-desktop3-develUpgrade gnome-classic-session | Sep 17, 2020 | Dec 18, 2019 |
| Debian | — | Upgrade webkit2gtk | Jul 30, 2024 | Dec 18, 2019 |
| Freebsd | — | Upgrade webkit2-gtk3 | Jul 7, 2019 | Jul 6, 2019 |
| Gentoo Linux | — | Upgrade net-libs/webkit-gtk. | Sep 9, 2019 | Sep 6, 2019 |
| Oracle_linux | — | Upgrade webkitgtk4-jsc-develUpgrade webkitgtk4-jscUpgrade webkitgtk4-docUpgrade webkitgtk4Upgrade webkitgtk4-devel | Oct 7, 2020 | May 20, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Dec 18, 2019 |
| Redhat_linux | — | Upgrade webkitgtk4-debuginfoUpgrade gnome-shell-extension-commonUpgrade gdk-pixbuf2-modulesUpgrade gnome-shell-extension-screenshot-window-sizerUpgrade evinceUpgrade webkit2gtk3-jsc-debuginfoUpgrade gnome-shell-extension-window-listUpgrade baobab-debugsourceUpgrade libpurpleUpgrade gvfs-archive-debuginfoUpgrade webkit2gtk3-debugsourceUpgrade gvfs-clientUpgrade gnome-remote-desktop-debugsourceUpgrade mutter-debuginfoUpgrade gnome-shell-extension-launch-new-instanceUpgrade gtk3Upgrade gtk3-immodule-xim-debuginfoUpgrade plymouth-plugin-label-debuginfoUpgrade mutter-develUpgrade gjsUpgrade plymouth-plugin-script-debuginfoUpgrade gvfs-mtpUpgrade gnome-shell-extension-dash-to-dockUpgrade gtk3-debugsourceUpgrade gtk-update-icon-cacheUpgrade accountsservice-libsUpgrade libpurple-debuginfoUpgrade gdmUpgrade gnome-shell-extension-disable-screenshieldUpgrade evince-browser-plugin-debuginfoUpgrade gvfs-afc-debuginfoUpgrade pango-debugsourceUpgrade plymouth-theme-spinnerUpgrade gvfs-afpUpgrade finch-debuginfoUpgrade gnome-settings-daemonUpgrade nautilus-debuginfoUpgrade webkit2gtk3-plugin-process-gtk2Upgrade gnome-shell-extension-panel-favoritesUpgrade gnome-classic-sessionUpgrade SDL-debuginfoUpgrade gnome-shell-extension-window-grouperUpgrade gvfs-debugsourceUpgrade evince-browser-pluginUpgrade plymouth-core-libsUpgrade plymouth-plugin-space-flares-debuginfoUpgrade gtk3-develUpgrade gvfs-develUpgrade plymouth-plugin-fade-throbberUpgrade webkitgtk4-docUpgrade SDLUpgrade gnome-shell-debugsourceUpgrade libpurple-perl-debuginfoUpgrade gnome-shell-extension-windowsNavigatorUpgrade gnome-remote-desktopUpgrade nautilusUpgrade gnome-shell-extension-user-themeUpgrade baobabUpgrade webkit2gtk3-jscUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-shell-extension-horizontal-workspacesUpgrade evince-nautilus-debuginfoUpgrade baobab-debuginfoUpgrade gdk-pixbuf2Upgrade plymouth-plugin-two-step-debuginfoUpgrade gnome-shell-extension-places-menuUpgrade gdk-pixbuf2-tests-debuginfoUpgrade plymouth-plugin-throbgressUpgrade pidginUpgrade gdm-debugsourceUpgrade gvfs-debuginfoUpgrade gnome-control-center-filesystemUpgrade gnome-desktop3-develUpgrade mozjs60-debugsourceUpgrade gnome-desktop3-debuginfoUpgrade gnome-shell-extension-drive-menuUpgrade webkit2gtk3-jsc-develUpgrade gnome-shell-extension-desktop-iconsUpgrade webkitgtk4Upgrade evince-debugsourceUpgrade gtk3-tests-debuginfoUpgrade SDL-debugsourceUpgrade mutter-debugsourceUpgrade gnome-shell-extension-no-hot-cornerUpgrade webkitgtk4-jsc-develUpgrade pidgin-perl-debuginfoUpgrade pidgin-develUpgrade gtk3-immodules-debuginfoUpgrade webkit2gtk3-devel-debuginfoUpgrade gvfs-afcUpgrade gjs-tests-debuginfoUpgrade gnome-shellUpgrade gtk3-debuginfoUpgrade gtk-update-icon-cache-debuginfoUpgrade plymouthUpgrade plymouth-graphics-libsUpgrade plymouth-plugin-scriptUpgrade plymouth-plugin-two-stepUpgrade libpurple-develUpgrade nautilus-develUpgrade evince-libs-debuginfoUpgrade SDL-develUpgrade gnome-software-editor-debuginfoUpgrade mutterUpgrade plymouth-system-themeUpgrade gdk-pixbuf2-develUpgrade gvfs-gphoto2-debuginfoUpgrade plymouth-theme-chargeUpgrade plymouth-theme-spinfinityUpgrade file-roller-debugsourceUpgrade gnome-software-debuginfoUpgrade gsettings-desktop-schemas-develUpgrade mozjs60-debuginfoUpgrade nautilus-extensionsUpgrade libpurple-tcl-debuginfoUpgrade gnome-shell-extension-updates-dialogUpgrade pidgin-debuginfoUpgrade plymouth-plugin-throbgress-debuginfoUpgrade gnome-software-debugsourceNo solution existsUpgrade gdk-pixbuf2-devel-debuginfoUpgrade file-rollerUpgrade gnome-shell-extension-workspace-indicatorUpgrade webkitgtk4-jscUpgrade webkit2gtk3-debuginfoUpgrade gjs-develUpgrade plymouth-debuginfoUpgrade gvfs-smbUpgrade gnome-software-editorUpgrade gnome-shell-extension-apps-menuUpgrade gvfsUpgrade gvfs-afp-debuginfoUpgrade gdk-pixbuf2-xlibUpgrade plymouth-devel-debuginfoUpgrade webkit2gtk3Upgrade plymouth-graphics-libs-debuginfoUpgrade gvfs-fuse-debuginfoUpgrade gjs-debuginfoUpgrade wayland-protocols-develUpgrade plymouth-scriptsUpgrade plymouth-plugin-space-flaresUpgrade gvfs-mtp-debuginfoUpgrade gnome-softwareUpgrade nautilus-debugsourceUpgrade plymouth-theme-scriptUpgrade gnome-shell-extension-native-window-placementUpgrade accountsservice-debugsourceUpgrade plymouth-debugsourceUpgrade accountsservice-develUpgrade pango-develUpgrade gjs-debugsourceUpgrade gvfs-goa-debuginfoUpgrade file-roller-debuginfoUpgrade plymouth-plugin-labelUpgrade evince-debuginfoUpgrade webkit2gtk3-jsc-devel-debuginfoUpgrade gnome-desktop3-debugsourceUpgrade gnome-control-centerUpgrade webkitgtk4-develUpgrade pangoUpgrade gvfs-fuseUpgrade accountsservice-libs-debuginfoUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade plymouth-plugin-fade-throbber-debuginfoUpgrade evince-nautilusUpgrade webkit2gtk3-plugin-process-gtk2-debuginfoUpgrade nautilus-extensions-debuginfoUpgrade plymouth-theme-solarUpgrade plymouth-core-libs-debuginfoUpgrade accountsserviceUpgrade gnome-desktop3Upgrade gvfs-archiveUpgrade gnome-settings-daemon-debuginfoUpgrade gsettings-desktop-schemasUpgrade pango-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gnome-shell-extension-systemMonitorUpgrade gvfs-smb-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade evince-libsUpgrade pango-tests-debuginfoUpgrade gnome-remote-desktop-debuginfoUpgrade gnome-tweaksUpgrade plymouth-theme-fade-inUpgrade gnome-control-center-debuginfoUpgrade gnome-shell-extension-auto-move-windowsUpgrade gtk3-immodule-ximUpgrade gvfs-goaUpgrade gnome-desktop3-tests-debuginfoUpgrade gtk3-devel-debuginfoUpgrade webkit2gtk3-develUpgrade gdk-pixbuf2-xlib-develUpgrade gnome-shell-extension-top-iconsUpgrade gnome-shell-debuginfoUpgrade mozjs60Upgrade gnome-settings-daemon-debugsourceUpgrade chrome-gnome-shellUpgrade mutter-tests-debuginfoUpgrade mozjs60-develUpgrade pidgin-debugsourceUpgrade gvfs-client-debuginfoUpgrade accountsservice-debuginfoUpgrade gvfs-gphoto2Upgrade appstream-dataUpgrade gnome-control-center-debugsourceUpgrade gdm-debuginfo | Sep 17, 2020 | Dec 18, 2019 |
| Rocky_linux | — | Upgrade pidgin-debuginfoUpgrade gdk-pixbuf2-devel-debuginfoUpgrade pango-develUpgrade gdk-pixbuf2-xlib-develUpgrade gdk-pixbuf2-xlibUpgrade libpurple-develUpgrade pidgin-debugsourceUpgrade pangoUpgrade pango-debuginfoUpgrade gdk-pixbuf2-modules-debuginfoUpgrade gdk-pixbuf2-debugsourceUpgrade gnome-desktop3-debugsourceUpgrade gdk-pixbuf2Upgrade gdk-pixbuf2-develUpgrade gdk-pixbuf2-xlib-debuginfoUpgrade gnome-desktop3Upgrade gnome-desktop3-develUpgrade pidgin-develUpgrade libpurple-debuginfoUpgrade pidginUpgrade gdk-pixbuf2-modulesUpgrade gdk-pixbuf2-debuginfoUpgrade gnome-desktop3-debuginfoUpgrade libpurpleUpgrade pango-debugsource | Mar 12, 2024 | Dec 18, 2019 |
| Suse | — | Upgrade typelib-1_0-webkit2webextension-4_0Upgrade libwebkit2gtk3-langUpgrade libjavascriptcoregtk-4_0-18Upgrade typelib-1_0-webkit2-4_0Upgrade libwebkit2gtk-4_0-37Upgrade libwebkit2gtk-4_0-37-32bitUpgrade typelib-1_0-javascriptcore-4_0Upgrade webkit2gtk3-minibrowserUpgrade libjavascriptcoregtk-4_0-18-32bitUpgrade webkit-jsc-4Upgrade webkit2gtk3-plugin-process-gtk2Upgrade webkit2gtk-4_0-injected-bundlesUpgrade webkit2gtk3-devel | Jul 16, 2019 | May 22, 2019 |
| Ubuntu | — | Upgrade libwebkit2gtk-4.0-37Upgrade libjavascriptcoregtk-4.0-18 | May 23, 2019 | May 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub