An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to code execution.

CONFIRM:https://support.apple.com/kb/HT211843 | CONFIRM:https://support.apple.com/kb/HT211844 | CONFIRM:https://support.apple.com/kb/HT211850 | CONFIRM:https://support.apple.com/kb/HT211935 | CONFIRM:https://support.apple.com/kb/HT211952 | DEBIAN:DSA-4797 | URL:https://www.debian.org/security/2020/dsa-4797 | FEDORA:FEDORA-2020-145877bcd3 | URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PDGBNKYT7NMW7CJ26YFUPUHPJVYGV7IQ/ | FEDORA:FEDORA-2020-e8a7566e80 | URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BY2OBQZFMEFZOSWXPXHPEHOJXXILEEX2/ | FULLDISC:20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0 | URL:http://seclists.org/fulldisclosure/2020/Nov/20 | FULLDISC:20201115 APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0 | URL:http://seclists.org/fulldisclosure/2020/Nov/19 | FULLDISC:20201115 APPLE-SA-2020-11-13-5 Additional information for APPLE-SA-2020-09-16-3 Safari 14.0 | URL:http://seclists.org/fulldisclosure/2020/Nov/18 | FULLDISC:20201115 APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0 | URL:http://seclists.org/fulldisclosure/2020/Nov/22 | GENTOO:GLSA-202012-10 | URL:https://security.gentoo.org/glsa/202012-10 | MISC:https://support.apple.com/HT211845 | URL:https://support.apple.com/HT211845 | MLIST:[oss-security] 20201123 WebKitGTK and WPE WebKit Security Advisory WSA-2020-0008 | URL:http://www.openwall.com/lists/oss-security/2020/11/23/3