Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-62f2-58pp-q2wg

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

A use-after-free issue was addressed with improved memory management. This issue is fixed in visionOS 2.4, tvOS 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, Safari 18.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

EPSS

Процентиль: 52%
0.00763
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-400
CWE-416

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 1 года назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS3: 8.8
redhat
больше 1 года назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS3: 4.3
nvd
больше 1 года назад

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

CVSS3: 4.3
debian
больше 1 года назад

A use-after-free issue was addressed with improved memory management. ...

CVSS3: 4.3
fstec
больше 1 года назад

Уязвимость модулей отображения веб-страниц WPE WebKit и WebKitGTK, связанная с использованием памяти после её освобождения, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 52%
0.00763
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-400
CWE-416