CVE-2019-6224 - A buffer overflow issue was addressed with improved memory handling

Back Back to CVE browser

HIGH

A buffer overflow issue was addressed with improved memory handling

Published Mar 5, 2019

8.8

HIGH

CVSS 3.0

EPSS 8.97%

Description

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 12.1.3
Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <macOS Mojave 10.14.3
Vendor Apple Product tvOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <tvOS 12.1.2
Vendor Apple Product watchOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <watchOS 5.1.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 12.1.3

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<macOS Mojave 10.14.3

Apple

tvOS

n/a

Version	Status	Constraints
unspecified	affected	<tvOS 12.1.2

Apple

watchOS

n/a

Version	Status	Constraints
unspecified	affected	<watchOS 5.1.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (7)

http://www.securityfocus.com/bid/106739
vdb-entryx_refsource_BIDThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15791
Advisory
https://support.apple.com/HT209443
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209446
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209447
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209448
x_refsource_CONFIRMVendor Advisory
https://www.exploit-db.com/exploits/46433/
exploitx_refsource_EXPLOIT-DBThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106739		vdb-entryx_refsource_BIDThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15791		Advisory
https://support.apple.com/HT209443		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209446		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209447		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209448		x_refsource_CONFIRMVendor Advisory
https://www.exploit-db.com/exploits/46433/		exploitx_refsource_EXPLOIT-DBThird Party Advisory