CVE-2019-8582

Katalog CVE

CVSS 5.5 · Medium EPSS 1,4%

Kerentanan Out-of-bounds Read pada apple icloud, apple itunes +3 lainnya. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iCloud for Windows 7.12, tvOS 12.3, iTunes 12.9.5 for Windows, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3. Processing a maliciously crafted font may result in the disclosure of process memory.

Rincian

Terbit di NVD

27 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT210118 advisory vendor
• https://support.apple.com/en-us/HT210119 advisory vendor
• https://support.apple.com/en-us/HT210120 advisory vendor
• https://support.apple.com/en-us/HT210124 advisory vendor
• https://support.apple.com/en-us/HT210125 advisory vendor