CVE-2019-8662

CRITICAL

9.8

Beschreibung

This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/18/2019

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

apple:iphone_osapple:mac_os_xapple:tvosapple:watchos

Schwachen (CWE)

CWE-416CWE-502

Referenzen

https://support.apple.com/HT210346(product-security@apple.com)

https://support.apple.com/HT210348(product-security@apple.com)

https://support.apple.com/HT210351(product-security@apple.com)

https://support.apple.com/HT210353(product-security@apple.com)

https://support.apple.com/HT210346(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT210348(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT210351(af854a3a-2127-422b-91ae-364da2661108)

https://support.apple.com/HT210353(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.