PT-2019-19135

CVE-2019-8647

Published

2019-12-18

Updated

2019-12-19

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.4 tvOS versions prior to 12.4 watchOS versions prior to 5.3

Description A use after free issue was addressed with improved memory management. A remote attacker may be able to cause arbitrary code execution.

Recommendations For iOS versions prior to 12.4, update to iOS 12.4 or later. For tvOS versions prior to 12.4, update to tvOS 12.4 or later. For watchOS versions prior to 5.3, update to watchOS 5.3 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Natalie Silvanovich

Samuel Groß

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers