CVE-2019-8857

Published: Oct 27, 2020Modified: Nov 21, 2024

3.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

The issue was addressed with improved validation when an iCloud Link is created. This issue is fixed in iOS 13.3 and iPadOS 13.3. Live Photo audio and video data may be shared via iCloud links even if Live Photo is disabled in the Share Sheet carousel.

Affected (2)

Products: Apple: Ipados, Iphone Os

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 13.3
Apple Iphone Os	Before 13.3

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://support.apple.com/en-us/HT210785

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT210785

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.