CVE-2019-6211

Published: Mar 5, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected (2)

Products: Apple: Iphone Os, Mac Os X

Apple

2 products

Iphone Os

Mac Os X

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Iphone Os	Before 12.1.3
Apple Mac Os X	Before 10.14.3

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://support.apple.com/HT209443

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT209446

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT209443

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT209446

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.