CVEvulnerability
CVE-2019-8608
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416, CWE-787
Description
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple icloud (< 7.12)
• apple itunes (< 12.9.5)
• apple safari (< 12.1.1)
• apple iphone os (< 12.3)
• apple mac os x (< 10.14.5)
• apple tvos (< 12.3)
Related
References
- https://support.apple.com/HT210118 Vendor Advisory
- https://support.apple.com/HT210119 Vendor Advisory
- https://support.apple.com/HT210120 Vendor Advisory
- https://support.apple.com/HT210123 Vendor Advisory
- https://support.apple.com/HT210124 Vendor Advisory
- https://support.apple.com/HT210125 Vendor Advisory
- https://support.apple.com/HT210212 Vendor Advisory
- https://support.apple.com/HT210118 Vendor Advisory
- https://support.apple.com/HT210119 Vendor Advisory
- https://support.apple.com/HT210120 Vendor Advisory
- https://support.apple.com/HT210123 Vendor Advisory
- https://support.apple.com/HT210124 Vendor Advisory
- https://support.apple.com/HT210125 Vendor Advisory
- https://support.apple.com/HT210212 Vendor Advisory