CVE-2018-20505

CVE-2018-20505 affects SQLite 3.25.2 and is caused by queries on a table with a malformed PRIMARY KEY, allowing remote attackers to cause an application crash (DoS) by running arbitrary SQL statements (e.g., in WebSQL use cases). Public-connected documents confirm the issue and note related mitig...

CVE-2019-8811

CVE-2019-8811 is a memory corruption vulnerability in WebKit that affected WebKit components used by Apple and related Windows apps (e.g., iCloud for Windows) and could be triggered by processing malicious web content to achieve arbitrary code execution. The vulnerability is addressed in the Appl...

CVE-2019-8601

CVE-2019-8601 refers to multiple memory corruption issues addressed in Apple’s WebKit-related components. The description indicates that malformed web content could be exploited to achieve arbitrary code execution, due to memory handling problems that were fixed. Affected platforms/derivatives (f...

CVE-2019-8536

CVE-2019-8536 is a memory corruption vulnerability affecting WebKit-based components exposed when processing malicious web content. The issue could lead to arbitrary code execution and is addressed by updates in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud ...

CVE-2019-8625

CVE-2019-8625 is a logic issue in WebKitGTK/WebKit related to state management. It is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, and iCloud for Windows 7.14, and is associated with universal cross-site scripting when processing crafted web content. Connected advisories...

CVE-2019-8676

CVE-2019-8676 is a WebKit-related vulnerability described as multiple memory corruption issues that could allow arbitrary code execution when processing malicious web content. The referenced advisories indicate fixes in: iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows...

CVE-2019-8544

CVE-2019-8544 is a memory corruption vulnerability addressed by Apple in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, and related Windows/iCloud components. The description states that processing maliciously crafted web content may lead to arbitrary code execution, and the fix was implemented t...

CVE-2019-8672

CVE-2019-8672 is a WebKit memory-corruption vulnerability affecting Apple platforms. Apple’s HT210346 notes fixes in iOS 12.4, macOS 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, and related Apple software (iTunes/iCloud for Windows). Description: memory corruption issues addressed with improve...

CVE-2019-8808

CVE-2019-8808 refers to memory corruption issues in WebKit-related components that could allow arbitrary code execution when processing malicious web content. Publicly documented fixes target Apple platforms: iOS/iPadOS 13.2, watchOS 6.1, tvOS 13.2, Safari 13.0.3, and iTunes for Windows 12.10.2; ...

CVE-2020-3862

CVE-2020-3862 is a denial-of-service issue affecting WebKit/Safari in Apple ecosystems. The vulnerability stems from memory handling in WebKit that could be triggered by visiting a malicious website, potentially impacting availability. Apple fixed this in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1...

CVE-2020-3864

CVE-2020-3864 is a logic issue where a DOM object context may not have had a unique security origin. It is fixed in Apple/software updates across multiple platforms: iCloud for Windows 7.17, iTunes for Windows 12.10.4, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 1...

CVE-2019-8671

CVE-2019-8671 is a WebKit memory-corruption issue reported by Apple and addressed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, and iCloud for Windows 7.13/10.6. The advisory indicates that processing malicious web content may lead to arbitrary code execu...

CVE-2019-8673

CVE-2019-8673 is a memory corruption issue in WebKit-related components that can be triggered by processing malicious web content. Public docs link this to WebKit/WebKitGTK families and list iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes/Windows components as patched. Upstream a...

CVE-2020-11764

OpenEXR before 2.4.1 contains an out-of-bounds write in copyIntoFrameBuffer (ImfMisc.cpp), CVE-2020-11764. Amazon Linux 2 ALAS2-2020-1499 confirms the OpenEXR fix and provides updated packages; Red Hat/CentOS advisories (RHSA-2020:4039) also address CVE-2020-11764 among related OpenEXR issues. Re...

CVE-2019-8686

CVE-2019-8686 is a memory corruption issue associated with WebKit/WebKitGTK family that Apple and multiple Linux advisories linked to, fixed in Apple platforms (iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2) and WebKitGTK-based packages (e.g., webkitgtk4 2.28.2 in AL2/CentOS advisories...

CVE-2019-8679

CVE-2019-8679 is a WebKit-related memory corruption issue publicly documented by Apple and multiple Linux advisories. Apple’s HT210346/HT210351 entries associate CVE-2019-8679 with WebKit and describe fixes for memory corruption in processed web content, mitigating arbitrary code execution. Affec...

CVE-2019-8813

CVE-2019-8813 is a WebKit/WebKit-derived issue classified as a logic vulnerability in state management that can enable universal cross-site scripting when processing malicious web content. The publicly documented fixes indicate the vulnerability is addressed in iOS 13.2, iPadOS 13.2, tvOS 13.2, a...

CVE-2019-8814

CVE-2019-8814 involves multiple memory corruption issues in WebKit that may be triggered by processing malicious web content, potentially enabling arbitrary code execution. Affected: WebKit/WebKitGTK/WebKit processes across Apple platforms (Safari on iOS/iPadOS/tvOS/macOS) and related WebKitGTK/W...

CVE-2019-8518

CVE-2019-8518 is a WebKit memory corruption issue fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, and iCloud for Windows 7.11. The vulnerability allows arbitrary code execution when processing malicious web content. Exploit discussion notes an out-of-bounds acce...

CVE-2019-8558

CVE-2019-8558 involves memory corruption in WebKit/WebKitGTK components affecting Apple platforms (iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11). The issue arises when processing malicious web content, potentially allowing arbitrary code execut...

CVE-2019-8535

CVE-2019-8535 is a WebKitGTK/WebKit-related memory corruption issue (memory handling/state management) that affected WebKitGTK4. The connected advisory ALAS2-2020-1563 lists CVE-2019-8535 among the WebKitGTK-related CVEs and notes a fix in the upstream WebKitGTK4 release (2.28.2) with updated mem...

CVE-2019-8681

CVE-2019-8681 is a memory corruption issue addressed in the WebKit/WebKitGTK stack. The Apple security content indicates it affects WebKit components and is fixed in Apple platforms: iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, and corresponding Windows components (iTunes for Windows...

CVE-2019-8677

CVE-2019-8677 is described as a set of memory-corruption issues in WebKit/WebKitGTK4 that could allow arbitrary code execution when processing malicious web content. Public advisories link this to WebKitGTK/WebKit components and show remediation via updated WebKitGTK/WebKit versions. In practice,...

CVE-2019-8726

CVE-2019-8726 is a WebKit/WebKitGTK4 memory-corruption vulnerability. The issue could allow arbitrary code execution when processing malicious web content. It is fixed in tvOS 13, iTunes for Windows 12.10.1, and iCloud for Windows 10.7/7.14; related advisories (Debian, Red Hat/CentOS) confirm ups...

CVE-2019-8559

CVE-2019-8559 is a memory corruption vulnerability associated with WebKit/WebKitGTK4 affecting multiple Apple platforms (iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes/iCloud for Windows) and WebKitGTK/WebKitGTK4 deployments. The issue is triggered by processing malicious web content, pote...

CVE-2019-8595

CVE-2019-8595 is a memory corruption issue addressed across Apple platforms and WebKitGTK/WebKit ecosystems. According to the connected advisories, it affects processing malicious web content and could lead to arbitrary code execution. Affected fixes are in Apple: iOS 12.3, macOS Mojave 10.14.5, ...

CVE-2019-8611

CVE-2019-8611 refers to multiple memory corruption issues in Apple’s WebKit/related components. The description specifies that processing maliciously crafted web content may lead to arbitrary code execution, and that fixes were implemented in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1...

CVE-2019-8644

CVE-2019-8644 is a memory-corruption family in WebKit-derived components that Apple patched across multiple platforms (iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes/iCloud for Windows). The issue enables arbitrary code execution when processing malicious web content. Remediatio...

CVE-2019-8666

CVE-2019-8666 is a WebKit memory corruption vulnerability affecting Apple platforms. The issue is described as memory handling improvements addressing multiple memory corruption flaws, with the impact that processing maliciously crafted web content may lead to arbitrary code execution. Apple’s ad...

CVE-2019-8823

CVE-2019-8823 affects WebKitGTK/WebKitGTK4. Affected component: WebKitGTK4, part of WebKit; issue described as memory corruption in WebKit leading to possible arbitrary code execution when processing malicious web content. Public references in Apple advisories (WebKit) list CVE-2019-8823 among We...

CVE-2019-8563

CVE-2019-8563 is a memory corruption issue reported by Apple, addressed as part of WebKit/Apple platform updates. The vulnerability could allow arbitrary code execution when processing maliciously crafted web content. It is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for...

CVE-2020-11760

CVE-2020-11760 affects OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in ImfRle.cpp (function rleUncompress). OpenEXR releases indicate the fix is to upgrade to v2.4.1. Public references in the connected documents confirm the CVE entry is included among OpenEXR issu...

CVE-2020-3895

CVE-2020-3895 is a memory corruption vulnerability in WebKit components (WebKitGTK/WebKit2GTK) where processing malicious web content could lead to arbitrary code execution. Affected: WebKitGTK/WebKit2GTK in multiple distros and Apple platforms. Remediation: update to fixed versions (e.g., WebKit...

CVE-2019-8689

CVE-2019-8689 pertains to multiple memory corruption issues in Apple’s WebKit/Safari stack that, when processing malicious web content, could lead to arbitrary code execution. The entry is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, a...

CVE-2020-11765

CVE-2020-11765 concerns OpenEXR prior to 2.4.1, where an off-by-one error in the ImfXdr.h read function used by DwaCompressor::Classifier::Classifier caused an out-of-bounds read. Public disclosures and vendor advisories (OpenEXR/OpenEXR 2.4.1 release notes; GLSA-202107-27; Debian DLA-2358-1) con...

CVE-2019-8551

CVE-2019-8551 affects WebKit-based components on Apple platforms (iOS 12.2, tvOS 12.2, Safari 12.1, iTunes/Windows, iCloud for Windows 7.11). Root cause: a logic issue corrected by improved input/content validation in web content processing. Impact: processing maliciously crafted web content may ...

CVE-2020-11758

CVE-2020-11758 affects OpenEXR before 2.4.1 via an out-of-bounds read in ImfOptimizedPixelReading.h. Public docs (Debian DLA-2358-1) note potential denial of service and possible arbitrary code execution when processing malformed EXR files; OpenEXR/ImageIO entries reference the same CVE family. R...

CVE-2020-11762

OpenEXR CVE-2020-11762: An out-of-bounds read and write in DwaCompressor::uncompress (ImfDwaCompressor.cpp) occurs when handling the UNKNOWN compression case, affecting versions before 2.4.1. The issue is addressed in OpenEXR 2.4.1 (upgrade recommended).

CVE-2019-8607

CVE-2019-8607 describes an out-of-bounds read in WebKit that could disclose process memory when processing malicious web content. Affected products include Apple platforms (iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes/Windows, iCloud for Windows 7.12). The root ...

CVE-2020-3894

CVE-2020-3894 describes a race condition in WebKit that could allow an application to read restricted memory. The issue affects Apple WebKit-related components across multiple platforms (iOS, iPadOS, tvOS, Safari, and Windows via iTunes/iCloud) and is fixed in iOS 13.4, iPadOS 13.4, tvOS 13.4, Sa...

CVE-2019-8584

CVE-2019-8584 is a memory corruption issue in Apple’s WebKit/WebKit-based components (affecting Safari and related Apple software). The description indicates multiple memory corruption flaws were addressed via improved memory handling, with the fixed versions listed as iOS 12.3, macOS Mojave 10.1...

CVE-2019-8615

CVE-2019-8615 concerns memory corruption in WebKit components used by Apple products (iOS, macOS, tvOS, Safari, iTunes/iCloud clients). The issue is described as multiple memory corruption problems that could allow arbitrary code execution when processing malicious web content. Mitigation steps a...

CVE-2019-8586

CVE-2019-8586 is a memory corruption vulnerability in Apple’s WebKit components. According to the connected advisories, it affects iOS, macOS, tvOS, Safari (and related Apple software), with exploitation triggered by processing malicious web content and potentially leading to arbitrary code execu...

CVE-2019-8735

CVE-2019-8735 involves multiple memory corruption issues in WebKit-derived components. The Initial document states the vulnerability could be triggered by processing malicious web content, with potential for arbitrary code execution, and that fixes arrive in: tvOS 13 , iTunes for Windows 12.10.1 ...

CVE-2019-6237

CVE-2019-6237 affects WebKitGTK/WebKit; is a set of memory corruption issues. The MiracleLinux/Rocky/AlmaLinux advisories and linked Nessus plugins confirm the issue is addressed by memory handling fixes and is fixed in Apple platforms including iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 1...

CVE-2022-26711

CVE-2022-26711 describes an integer overflow in Apple's ImageIO WebP parsing. The root cause is an overflow in row-bytes calculation leading to an undersized buffer and out-of-bounds access during image decoding, enabling arbitrary code execution in apps using ImageIO (Safari, Preview, Mail, Mess...

CVE-2019-8524

CVE-2019-8524 is a set of memory corruption issues in WebKit components that are triggered by processing malicious web content. The vulnerability is addressed by updates across multiple platforms, with upstream fixes described as improved memory handling and related mitigations. Affected: WebKit/...

CVE-2018-4200

CVE-2018-4200 concerns WebKit in Apple products. A crafted web site could trigger a WebCore::jsElementScrollHeightGetter use-after-free, leading to arbitrary code execution or a denial of service (memory corruption/crash). Affected: iOS < 11.3.1; Safari < 11.1; iCloud for Windows < 7.5; ...

CVE-2019-8571

CVE-2019-8571 involves memory corruption issues addressed by Apple and partners, affecting Apple platforms that include iOS, macOS Mojave, tvOS, Safari, and related Windows components. The description states that multiple memory corruption flaws were fixed by improved memory handling, with the im...

CVE-2019-8622

CVE-2019-8622 is a WebKit memory-corruption issue affecting Apple platforms (iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, etc.). The vulnerability can lead to arbitrary code execution when processing malicious web content. Remediation is to upgrade to the patched WebKi...