CVEvulnerability
CVE-2019-8746
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-125
Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
Affected configurations
• apple icloud (< 7.14)
• apple icloud (>= 10.0 < 10.7)
• apple itunes (< 12.10.1)
• apple iphone os (< 13.1)
• apple mac os x (< 10.15)
• apple tvos (< 13)
• apple watchos (< 6.0)
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://support.apple.com/en-us/HT210604 Vendor Advisory
- https://support.apple.com/en-us/HT210606 Vendor Advisory
- https://support.apple.com/en-us/HT210607 Vendor Advisory
- https://support.apple.com/en-us/HT210634 Vendor Advisory
- https://support.apple.com/en-us/HT210635 Vendor Advisory
- https://support.apple.com/en-us/HT210636 Vendor Advisory
- https://support.apple.com/en-us/HT210637 Vendor Advisory
- https://support.apple.com/en-us/HT210722 Vendor Advisory
- https://support.apple.com/en-us/HT210604 Vendor Advisory
- https://support.apple.com/en-us/HT210606 Vendor Advisory
- https://support.apple.com/en-us/HT210607 Vendor Advisory
- https://support.apple.com/en-us/HT210634 Vendor Advisory
- https://support.apple.com/en-us/HT210635 Vendor Advisory
- https://support.apple.com/en-us/HT210636 Vendor Advisory
- https://support.apple.com/en-us/HT210637 Vendor Advisory
- https://support.apple.com/en-us/HT210722 Vendor Advisory