An out-of-bounds read was addressed with improved input validation. This issue is fixed in Safari 18.6, watchOS 11.6, visionOS 2.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6. Processing maliciously crafted web content may disclose internal states of the app.
The product reads data past the end, or before the beginning, of the intended buffer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Safari | Apple | * | 18.6 (excluding) |
Ipados | Apple | * | 18.6 (excluding) |
Iphone_os | Apple | * | 18.6 (excluding) |
Macos | Apple | * | 15.6 (excluding) |
Tvos | Apple | * | 18.6 (excluding) |
Visionos | Apple | * | 2.6 (excluding) |
Watchos | Apple | * | 11.6 (excluding) |
Red Hat Enterprise Linux 8 | RedHat | webkit2gtk3-0:2.48.5-1.el8_10 | * |
Red Hat Enterprise Linux 8.2 Advanced Update Support | RedHat | webkit2gtk3-0:2.48.5-1.el8_2 | * |
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | RedHat | webkit2gtk3-0:2.48.5-1.el8_4 | * |
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | RedHat | webkit2gtk3-0:2.48.5-1.el8_4 | * |
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | RedHat | webkit2gtk3-0:2.48.5-1.el8_6 | * |
Red Hat Enterprise Linux 8.6 Telecommunications Update Service | RedHat | webkit2gtk3-0:2.48.5-1.el8_6 | * |
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | RedHat | webkit2gtk3-0:2.48.5-1.el8_6 | * |
Red Hat Enterprise Linux 8.8 Telecommunications Update Service | RedHat | webkit2gtk3-0:2.48.5-1.el8_8 | * |
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | RedHat | webkit2gtk3-0:2.48.5-1.el8_8 | * |
Red Hat Enterprise Linux 9 | RedHat | webkit2gtk3-0:2.48.5-1.el9_6 | * |
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | RedHat | webkit2gtk3-0:2.48.5-1.el9_0 | * |
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | RedHat | webkit2gtk3-0:2.48.5-1.el9_2 | * |
Red Hat Enterprise Linux 9.4 Extended Update Support | RedHat | webkit2gtk3-0:2.48.5-1.el9_4 | * |
Qtwebkit-opensource-src | Ubuntu | esm-apps/bionic | * |
Qtwebkit-opensource-src | Ubuntu | esm-apps/focal | * |
Qtwebkit-opensource-src | Ubuntu | esm-apps/jammy | * |
Qtwebkit-opensource-src | Ubuntu | esm-apps/noble | * |
Qtwebkit-opensource-src | Ubuntu | esm-infra/xenial | * |
Qtwebkit-opensource-src | Ubuntu | jammy | * |
Qtwebkit-opensource-src | Ubuntu | noble | * |
Qtwebkit-source | Ubuntu | esm-apps/bionic | * |
Qtwebkit-source | Ubuntu | esm-apps/xenial | * |
Webkit2gtk | Ubuntu | devel | * |
Webkit2gtk | Ubuntu | esm-infra/bionic | * |
Webkit2gtk | Ubuntu | esm-infra/focal | * |
Webkit2gtk | Ubuntu | esm-infra/xenial | * |
Webkit2gtk | Ubuntu | jammy | * |
Webkit2gtk | Ubuntu | noble | * |
Webkit2gtk | Ubuntu | plucky | * |
Webkit2gtk | Ubuntu | upstream | * |
Webkitgtk | Ubuntu | esm-apps/bionic | * |
Webkitgtk | Ubuntu | esm-apps/xenial | * |
Wpewebkit | Ubuntu | upstream | * |