PT-2019-19135

CVE-2019-8647

Publicado

2019-12-18

Atualizado

2019-12-19

Descrição por

CVSS 3.1

9.8

Crítica

MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.4 tvOS versions prior to 12.4 watchOS versions prior to 5.3

Description A use after free issue was addressed with improved memory management. A remote attacker may be able to cause arbitrary code execution.

Recommendations For iOS versions prior to 12.4, update to iOS 12.4 or later. For tvOS versions prior to 12.4, update to tvOS 12.4 or later. For watchOS versions prior to 5.3, update to watchOS 5.3 or later.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Natalie Silvanovich

Samuel Groß

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-416: Use After Free

Identificadores relacionados