HIGH
A memory corruption issue was addressed with improved input validation
Published Mar 5, 2019
7.8
HIGHCVSS 3.0
EPSS 1.52%
Description
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<iOS 12.1.3
- Version
-
- Version unspecifiedStatusaffectedConstraints<macOS Mojave 10.14.3
- Version
-
- Version unspecifiedStatusaffectedConstraints<tvOS 12.1.2
- Version
-
- Version unspecifiedStatusaffectedConstraints<watchOS 5.1.3
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Apple | iOS | n/a |
| ||||||
| Apple | macOS | n/a |
| ||||||
| Apple | tvOS | n/a |
| ||||||
| Apple | watchOS | n/a |
|
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- http://www.securityfocus.com/bid/106739 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://support.apple.com/HT209443 x_refsource_CONFIRMVendor Advisory
- https://support.apple.com/HT209446 x_refsource_CONFIRMVendor Advisory
- https://support.apple.com/HT209447 x_refsource_CONFIRMVendor Advisory
- https://support.apple.com/HT209448 x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/106739 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| https://support.apple.com/HT209443 | x_refsource_CONFIRMVendor Advisory | |
| https://support.apple.com/HT209446 | x_refsource_CONFIRMVendor Advisory | |
| https://support.apple.com/HT209447 | x_refsource_CONFIRMVendor Advisory | |
| https://support.apple.com/HT209448 | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Mar 5, 2019
Updated Aug 4, 2024
Reserved Jan 11, 2019
Link CVE-2019-6210
CISA Vulnrichment
Updated n/a