CVEvulnerability
CVE-2019-8749
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-10-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. Multiple issues in libxml2.
Affected configurations
• apple icloud (< 7.14)
• apple icloud (>= 10.0 < 10.7)
• apple itunes (< 12.10.1)
• apple safari (< 13.0.1)
• apple iphone os (< 13.0)
• apple tvos (< 13)
• apple watchos (< 6.0)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://support.apple.com/en-us/HT210604 Vendor Advisory
- https://support.apple.com/en-us/HT210606 Vendor Advisory
- https://support.apple.com/en-us/HT210607 Vendor Advisory
- https://support.apple.com/en-us/HT210634 Vendor Advisory
- https://support.apple.com/en-us/HT210635 Vendor Advisory
- https://support.apple.com/en-us/HT210636 Vendor Advisory
- https://support.apple.com/en-us/HT210637 Vendor Advisory
- https://support.apple.com/en-us/HT210722 Vendor Advisory
- https://support.apple.com/en-us/HT210604 Vendor Advisory
- https://support.apple.com/en-us/HT210606 Vendor Advisory
- https://support.apple.com/en-us/HT210607 Vendor Advisory
- https://support.apple.com/en-us/HT210634 Vendor Advisory
- https://support.apple.com/en-us/HT210635 Vendor Advisory
- https://support.apple.com/en-us/HT210636 Vendor Advisory
- https://support.apple.com/en-us/HT210637 Vendor Advisory
- https://support.apple.com/en-us/HT210722 Vendor Advisory