VDB
GHSA-r8h5-fm59-g356
GHSA-r8h5-fm59-g356
PUBLISHED
CVSS 5.5 MEDIUM
Record from GitHub Advisory Database · Published December 12, 2023
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. Processing an image may lead to a denial-of-service.
Risk scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Timeline
- Dec 12, 2023 CVE Published
- Apr 10, 2026 Distribution Patch
- Apr 10, 2026 Security Advisory (2 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-r8h5-fm59-g356
vulnetix vdb fixes GHSA-r8h5-fm59-g356Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-r8h5-fm59-g356/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://seclists.org/fulldisclosure/2023/Dec/13 url
- http://seclists.org/fulldisclosure/2023/Dec/6 url
- http://seclists.org/fulldisclosure/2023/Dec/9 url
- https://support.apple.com/en-us/HT214034 advisory
- https://support.apple.com/en-us/HT214035 advisory
- https://support.apple.com/en-us/HT214040 advisory
- https://support.apple.com/en-us/HT214041 advisory
- https://support.apple.com/kb/HT214034 advisory
- https://support.apple.com/en-us/HT214036 advisory
- https://support.apple.com/en-us/HT214039 advisory
- https://support.apple.com/kb/HT214039 advisory
- https://www.debian.org/security/2023/dsa-5580 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-42883 advisory
- http://seclists.org/fulldisclosure/2023/Dec/12 url
- http://seclists.org/fulldisclosure/2023/Dec/7 url
- http://seclists.org/fulldisclosure/2023/Dec/8 url
- http://www.openwall.com/lists/oss-security/2023/12/18/1 url