CVE-2019-8812: High severity tvos vulnerability
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Other sources
WebKit. Multiple memory corruption issues were addressed with improved memory handling.
WebKitGTK Security Advisory WSA-2019-0006 describes the following issue:
CVE-2019-8812
Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Description: Multiple memory corruption issues were addressed with improved memory handling.
Versions affected: WebKitGTK before 2.26.2 and WPE WebKit before 2.26.2.
— Red Hat
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-8787
- CVE-2019-8803
- CVE-2019-8785
- CVE-2019-8797
- CVE-2019-8795
- CVE-2019-8798
- CVE-2019-8794
- CVE-2019-8786
- CVE-2019-8829
- CVE-2019-8813
- CVE-2019-8782
- CVE-2019-8783
- CVE-2019-8808
- CVE-2019-8811
- CVE-2019-8812
- CVE-2019-8814
- CVE-2019-8816
- CVE-2019-8819
- CVE-2019-8820
- CVE-2019-8821
- CVE-2019-8822
- CVE-2019-8823
- CVE-2019-8827
- CVE-2019-8815
- CVE-2019-8796
- CVE-2019-8747
- CVE-2017-7152
- CVE-2019-8750
- CVE-2019-8775
- CVE-2019-8764
- CVE-2019-8743
- CVE-2019-8765
- CVE-2019-8766
- CVE-2019-8784
- CVE-2019-8801
- CVE-2019-8788
- CVE-2019-8789
- CVE-2019-8804
- CVE-2019-8793
- CVE-2019-15126
Frequently Asked Questions
What is CVE-2019-8812?
CVE-2019-8812 is a vulnerability in WebKit that allows arbitrary code execution when processing maliciously crafted web content.
What is the severity of CVE-2019-8812?
CVE-2019-8812 has a severity of 8.8, which is considered high.
Which software versions are affected by CVE-2019-8812?
CVE-2019-8812 affects iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, and WebKitGTK 2.26.2.
How can I fix CVE-2019-8812 on my Apple devices?
To fix CVE-2019-8812 on Apple devices, make sure to update to iOS 13.2 or iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, or iTunes for Windows 12.10.2.
Where can I find more information about CVE-2019-8812?
You can find more information about CVE-2019-8812 at the following references: [Apple Support](https://support.apple.com/en-us/HT210721), [Red Hat CVE-2019-8812](https://access.redhat.com/security/cve/CVE-2019-8812), [WebKitGTK WSA-2019-0006](https://webkitgtk.org/security/WSA-2019-0006.html).