CVE-2008-0894: Apple Safari

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (1) bitmap (BMP) or (2) GIF file, a related issue to CVE-2008-0420.

Affected products

• Apple Safari: any version

Published 2008-02-21. Last modified 2026-06-16.