Read the docs
TI-2009-02102 Aliases CVE-2009-2195GHSA-g9rg-m48v-pqpf

Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute…

Priority MEDIUM 55CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.

Why it matters now

EPSS 0.13294 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 81

CPEVersionsRoleVendor
cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:*10.4.Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*10.5.7Running onApple
cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*10.5.8Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*10.4.11Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*10.5.7Running onApple
cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*10.5.8Running onApple
cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*up to 4.0.2VulnerableApple
cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:*0.8VulnerableApple
  • cpe:2.3:o:apple:mac_os_x:10.4.:*:*:*:*:*:*:* Versions 10.4. Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:* Versions 10.5.7 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:* Versions 10.5.8 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:* Versions 10.4.11 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:* Versions 10.5.7 Running on ·Apple
  • cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:* Versions 10.5.8 Running on ·Apple
  • cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* Versions up to 4.0.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:0.8:*:*:*:*:*:*:* Versions 0.8 Vulnerable ·Apple
Show 71 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:*0.9VulnerableApple
cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:*1.0VulnerableApple
cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:*1.0 betaVulnerableApple
cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:*1.0 beta2VulnerableApple
cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableApple
cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:*1.0.0b1VulnerableApple
cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:*1.0.0b2VulnerableApple
cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:*1.0.1VulnerableApple
cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:*1.0.2VulnerableApple
cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:*1.0.3VulnerableApple
cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:*1.0.3 85.8VulnerableApple
cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:*1.0.3 85.8.1VulnerableApple
cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:*1.1VulnerableApple
cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:*1.1.0VulnerableApple
cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:*1.1.1VulnerableApple
cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:*1.2VulnerableApple
cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableApple
cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableApple
cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableApple
cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableApple
cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:*1.2.4VulnerableApple
cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:*1.2.5VulnerableApple
cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:*1.3VulnerableApple
cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableApple
cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:*1.3.1VulnerableApple
cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:*1.3.2VulnerableApple
cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:*1.3.2 312.5VulnerableApple
cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:*1.3.2 312.6VulnerableApple
cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:*2.0VulnerableApple
cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableApple
cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableApple
cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableApple
cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableApple
cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:*2.0.3 417.8VulnerableApple
cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:*2.0.3 417.9VulnerableApple
cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:*2.0.3 417.9.2VulnerableApple
cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:*2.0.3 417.9.3VulnerableApple
cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:*2.0.3_417.9.3VulnerableApple
cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableApple
cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:*2.0.4_419.3VulnerableApple
cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:*2.0_preVulnerableApple
cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:*3VulnerableApple
cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:*3.0VulnerableApple
cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableApple
cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:*3.0.0bVulnerableApple
cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableApple
cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:*3.0.1 betaVulnerableApple
cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:*3.0.1bVulnerableApple
cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:*3.0.2VulnerableApple
cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:*3.0.2bVulnerableApple
cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:*3.0.3VulnerableApple
cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:*3.0.3 522.15.5VulnerableApple
cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:*3.0.3bVulnerableApple
cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:*3.0.4VulnerableApple
cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:*3.0.4_betaVulnerableApple
cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:*3.0.4bVulnerableApple
cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:*3.1VulnerableApple
cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableApple
cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:*3.1.0bVulnerableApple
cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableApple
cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:*3.1.2VulnerableApple
cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:*3.2VulnerableApple
cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:*3.2.0VulnerableApple
cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableApple
cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:*3.2.2VulnerableApple
cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*4.0VulnerableApple
cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*4.0 betaVulnerableApple
cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*4.0.1VulnerableApple
cpe:2.3:a:apple:safari:4.0_beta:528.16:*:*:*:*:*:*4.0_beta 528.16VulnerableApple
cpe:2.3:a:apple:safari:4beta:*:*:*:*:*:*:*4betaVulnerableApple
cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:*beta2VulnerableApple
  • cpe:2.3:a:apple:safari:0.9:*:*:*:*:*:*:* Versions 0.9 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0:beta:*:*:*:*:*:* Versions 1.0 beta Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0:beta2:*:*:*:*:*:* Versions 1.0 beta2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.0b1:*:*:*:*:*:*:* Versions 1.0.0b1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.0b2:*:*:*:*:*:*:* Versions 1.0.0b2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.3:85.8:*:*:*:*:*:* Versions 1.0.3 85.8 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.0.3:85.8.1:*:*:*:*:*:* Versions 1.0.3 85.8.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.2.4:*:*:*:*:*:*:* Versions 1.2.4 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.3.2:312.5:*:*:*:*:*:* Versions 1.3.2 312.5 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:1.3.2:312.6:*:*:*:*:*:* Versions 1.3.2 312.6 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.3:417.8:*:*:*:*:*:* Versions 2.0.3 417.8 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.3:417.9:*:*:*:*:*:* Versions 2.0.3 417.9 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.3:417.9.2:*:*:*:*:*:* Versions 2.0.3 417.9.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.3:417.9.3:*:*:*:*:*:* Versions 2.0.3 417.9.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.3_417.9.3:*:*:*:*:*:*:* Versions 2.0.3_417.9.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0.4_419.3:*:*:*:*:*:*:* Versions 2.0.4_419.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:2.0_pre:*:*:*:*:*:*:* Versions 2.0_pre Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3:*:*:*:*:*:*:* Versions 3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.0b:*:*:*:*:*:*:* Versions 3.0.0b Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.1:beta:*:*:*:*:*:* Versions 3.0.1 beta Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.1b:*:*:*:*:*:*:* Versions 3.0.1b Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.2b:*:*:*:*:*:*:* Versions 3.0.2b Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.3:522.15.5:*:*:*:*:*:* Versions 3.0.3 522.15.5 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.3b:*:*:*:*:*:*:* Versions 3.0.3b Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.4_beta:*:*:*:*:*:*:* Versions 3.0.4_beta Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.0.4b:*:*:*:*:*:*:* Versions 3.0.4b Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.1.0b:*:*:*:*:*:*:* Versions 3.1.0b Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.1.2:*:*:*:*:*:*:* Versions 3.1.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:* Versions 4.0 beta Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:4.0_beta:528.16:*:*:*:*:*:* Versions 4.0_beta 528.16 Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:4beta:*:*:*:*:*:*:* Versions 4beta Vulnerable ·Apple
  • cpe:2.3:a:apple:safari:beta2:*:*:*:*:*:*:* Versions beta2 Vulnerable ·Apple

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-2195
  2. 2026-10-03 Alias added: GHSA-g9rg-m48v-pqpf

References

Patch 2

Advisory 2

Other 2

  • TI-2025-17951 Out-of-bounds write in Apple Safari KEVCVSS 3.1CRITICAL 10.0
  • TI-2025-28228 Use after free in Apple Safari KEVCVSS 3.1HIGH 8.8
  • TI-2025-22512 Memory corruption in Apple Safari KEVCVSS 3.1HIGH 8.8
  • TI-2025-12953 Memory corruption in Google Chrome KEVCVSS 3.1HIGH 8.8
  • TI-2025-05957 Improper input validation in Google Chrome KEVCVSS 3.1HIGH 8.8
  • TI-2024-29863 Apple Safari: Processing maliciously crafted web content may lead to arbitrary code… KEVCVSS 3.1HIGH 8.8
See all 1693 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences