CVEvulnerability
CVE-2019-8591
7.1 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.1 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
- CVSS 2.0 ([email protected])
- 8.8 HIGH — AV:N/AC:M/Au:N/C:N/I:C/A:C
- Weaknesses
- CWE-843
Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.
Affected configurations
• apple iphone os (< 12.3)
• apple mac os x (< 10.14.5)
• apple tvos (< 12.3)
• apple watchos (< 5.2.1)
Related
Weakness · CWE (1)
- CWE-843 Access of Resource Using Incompatible Type weakness
References
- https://support.apple.com/HT210118 Vendor Advisory
- https://support.apple.com/HT210119 Vendor Advisory
- https://support.apple.com/HT210120 Vendor Advisory
- https://support.apple.com/HT210122 Vendor Advisory
- https://support.apple.com/HT210118 Vendor Advisory
- https://support.apple.com/HT210119 Vendor Advisory
- https://support.apple.com/HT210120 Vendor Advisory
- https://support.apple.com/HT210122 Vendor Advisory