CVE-2019-8808: High severity tvos vulnerability
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Other sources
WebKit. Multiple memory corruption issues were addressed with improved memory handling.
WebKitGTK Security Advisory WSA-2019-0006 describes the following issue:
CVE-2019-8808
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
Versions affected: WebKitGTK before 2.26.0 and WPE WebKit before 2.26.0.
— Red Hat
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8787
- CVE-2019-8803
- CVE-2019-8785
- CVE-2019-8797
- CVE-2019-8795
- CVE-2019-8798
- CVE-2019-8794
- CVE-2019-8786
- CVE-2019-8829
- CVE-2019-8813
- CVE-2019-8782
- CVE-2019-8783
- CVE-2019-8808
- CVE-2019-8811
- CVE-2019-8812
- CVE-2019-8814
- CVE-2019-8816
- CVE-2019-8819
- CVE-2019-8820
- CVE-2019-8821
- CVE-2019-8822
- CVE-2019-8823
- CVE-2019-8827
- CVE-2019-8815
- CVE-2019-8796
- CVE-2019-8747
- CVE-2017-7152
- CVE-2019-8750
- CVE-2019-8775
- CVE-2019-8764
- CVE-2019-8743
- CVE-2019-8765
- CVE-2019-8766
- CVE-2019-8784
- CVE-2019-8801
- CVE-2019-8788
- CVE-2019-8789
- CVE-2019-8804
- CVE-2019-8793
- CVE-2019-15126
Frequently Asked Questions
What is CVE-2019-8808?
CVE-2019-8808 is a vulnerability in WebKit that allows for arbitrary code execution when processing malicious web content.
How severe is CVE-2019-8808?
CVE-2019-8808 has a severity rating of 8.8, which is considered high.
Which software versions are affected by CVE-2019-8808?
CVE-2019-8808 affects iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, and iTunes for Windows 12.10.2.
How can I fix CVE-2019-8808?
To fix CVE-2019-8808, you should update your software to the fixed versions: iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, and iTunes for Windows 12.10.2.
Where can I find more information about CVE-2019-8808?
You can find more information about CVE-2019-8808 on the Apple support website (https://support.apple.com/en-us/HT210721, https://support.apple.com/en-us/HT210726) and the Red Hat security advisory (https://access.redhat.com/security/cve/CVE-2019-8808).