CVE-2019-8577

Published: Dec 18, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges.

Affected (8)

Products: Apple: Icloud, Iphone Os, Itunes, Mac Os X, Safari, Tvos, Watchos

7 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Apple Icloud	Before 7.12
Apple Icloud	From 10.0 to 10.4
Apple Iphone Os	Before 12.3
Apple Itunes	Before 12.9.5
Apple Mac Os X	Before 10.14.5
Apple Safari	Before 12.1.1
Apple Tvos	Before 12.3
Apple Watchos	Before 5.2.1

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/

Source: product-security@apple.com

https://support.apple.com/HT210118

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT210119

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT210120

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT210122

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT210124

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT210125

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/HT210212

Source: product-security@apple.com

Vendor Advisory

https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/

Source: af854a3a-2127-422b-91ae-364da2661108

https://support.apple.com/HT210118

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT210119

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT210120

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT210122

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT210124

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT210125

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/HT210212

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.