Vulnerabilities > Apple > Safari > 46

DATE CVE VULNERABILITY TITLE RISK
2017-12-21 CVE-2017-17821 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Apple Safari 46
WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact because it calls the FastBitVectorWordOwner::resizeSlow function (in WTF/wtf/FastBitVector.cpp) for a purpose other than initializing a bitvector size, and resizeSlow mishandles cases where the old array length is greater than the new array length.
network
low complexity
apple CWE-119
critical
9.8