CVE-2019-8525

Katalog CVE

CVSS 6.7 · Medium EPSS 0,37%

Kerentanan Out-of-bounds Write pada apple iphone os, apple mac os x +1 lainnya. Skor CVSS 3.1 6.7 (Medium) menurut NVD.

Deskripsi (NVD)

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. An application may be able to execute arbitrary code with kernel privileges.

Rincian

Terbit di NVD

27 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.7 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 29,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT209599 advisory vendor
• https://support.apple.com/en-us/HT209600 advisory vendor
• https://support.apple.com/en-us/HT209602 advisory vendor
• https://support.apple.com/en-us/HT210119 advisory vendor