VDB
GHSA-c838-pj7m-89q4
GHSA-c838-pj7m-89q4
PUBLISHED
CVSS 8.800000190734863 HIGH
Record from GitHub Advisory Database · Published May 24, 2022
A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution.
Risk scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Timeline
- May 24, 2022 CVE Published
- Apr 29, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-c838-pj7m-89q4
vulnetix vdb fixes GHSA-c838-pj7m-89q4
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-c838-pj7m-89q4/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ url
- https://support.apple.com/en-us/HT212149 url
- https://support.apple.com/en-us/HT212152 url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU url
- https://support.apple.com/en-us/HT212146 url
- https://support.apple.com/en-us/HT212147 url
- https://support.apple.com/en-us/HT212148 url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1789 url
- https://nvd.nist.gov/vuln/detail/CVE-2021-1789 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU url
- https://security.gentoo.org/glsa/202104-03 url