CVE-2019-6200 - An out-of-bounds read was addressed with improved input validation

Back Back to CVE browser

HIGH

An out-of-bounds read was addressed with improved input validation

Published Mar 5, 2019

8.8

HIGH

CVSS 3.0

EPSS 0.80%

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. An attacker in a privileged network position may be able to execute arbitrary code.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 12.1.3
Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <macOS Mojave 10.14.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 12.1.3

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<macOS Mojave 10.14.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (4)

http://www.securityfocus.com/bid/106694
vdb-entryx_refsource_BIDThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15767
Advisory
https://support.apple.com/HT209443
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209446
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106694		vdb-entryx_refsource_BIDThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15767		Advisory
https://support.apple.com/HT209443		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209446		x_refsource_CONFIRMVendor Advisory