CVEvulnerability
CVE-2019-8794
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-20
Description
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. An application may be able to read restricted memory.
Affected configurations
• apple ipados (< 13.2)
• apple iphone os (< 13.2)
• apple mac os x (< 10.15.1)
• apple tvos (< 13.2)
• apple watchos (< 6.1)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- https://support.apple.com/HT210721 Vendor Advisory
- https://support.apple.com/HT210722 Vendor Advisory
- https://support.apple.com/HT210723 Vendor Advisory
- https://support.apple.com/HT210724 Vendor Advisory
- https://support.apple.com/HT210721 Vendor Advisory
- https://support.apple.com/HT210722 Vendor Advisory
- https://support.apple.com/HT210723 Vendor Advisory
- https://support.apple.com/HT210724 Vendor Advisory