VDB
GHSA-j8gc-8grp-vffr
GHSA-j8gc-8grp-vffr
PUBLISHED
CVSS 7 HIGH
Record from GitHub Advisory Database · Published April 1, 2025
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in tvOS 18.4, Safari 18.4, iPadOS 17.7.6, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Processing maliciously crafted web content may lead to an unexpected process crash.
Risk scores
CVSS 3.1
7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Timeline
- Apr 1, 2025 CVE Published
- May 1, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-j8gc-8grp-vffr
vulnetix vdb fixes GHSA-j8gc-8grp-vffrOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-j8gc-8grp-vffr/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-24209 advisory
- https://support.apple.com/en-us/122372 url
- https://support.apple.com/en-us/122377 url
- https://support.apple.com/en-us/122379 url
- https://lists.debian.org/debian-lts-announce/2025/06/msg00016.html url
- https://support.apple.com/en-us/122376 url
- http://seclists.org/fulldisclosure/2025/Apr/11 url
- https://support.apple.com/en-us/122371 url
- http://seclists.org/fulldisclosure/2025/Apr/13 url
- http://seclists.org/fulldisclosure/2025/Apr/2 url
- http://seclists.org/fulldisclosure/2025/Apr/4 url
- http://seclists.org/fulldisclosure/2025/Apr/5 url
- http://seclists.org/fulldisclosure/2025/Apr/8 url
- https://support.apple.com/en-us/122373 url