CVE-2019-8592

Katalog CVE

CVSS 7.8 · High EPSS 1,3%

Kerentanan Improper Input Validation pada apple iphone os, apple mac os x +2 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, iOS 13. Playing a malicious audio file may lead to arbitrary code execution.

Rincian

Terbit di NVD

27 Oktober 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation
CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 69,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.apple.com/en-us/HT210118 advisory vendor
• https://support.apple.com/en-us/HT210119 advisory vendor
• https://support.apple.com/en-us/HT210120 advisory vendor
• https://support.apple.com/en-us/HT210122 advisory vendor
• https://support.apple.com/en-us/HT210604 advisory vendor
• https://support.apple.com/en-us/HT210606 advisory vendor
• https://support.apple.com/en-us/HT210634 advisory vendor
• https://support.apple.com/en-us/HT210722 advisory vendor