PT-2019-6083

CVE-2019-7286

Published

2019-02-07

Updated

2025-10-23

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.1.4 macOS Mojave versions prior to 10.14.3 Supplemental Update

Description A memory corruption issue was addressed with improved input validation, allowing an application to potentially gain elevated privileges. The issue is related to a buffer overflow in dynamic memory.

Recommendations For iOS versions prior to 12.1.4, update to iOS 12.1.4 or later to resolve the issue. For macOS Mojave versions prior to 10.14.3 Supplemental Update, apply the macOS Mojave 10.14.3 Supplemental Update to fix the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Clement Lecigne

Ian Beer

Samuel Groß

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write