PT-2019-19073

CVE-2019-8529

Published

2019-03-26

Updated

2019-12-30

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 iOS versions prior to 12.2

Description A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kernel privileges.

Recommendations For macOS versions prior to 10.14.4, update to macOS Mojave 10.14.4 or later. For iOS versions prior to 12.2, update to iOS 12.2 or later.

Exploitability

Fix

Impacts

Researchers

Juwei Lin

Panicaii

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

Related identifiers

CVE-2019-8529