CVE-2019-6235 - A memory corruption issue was addressed with improved validation

Back Back to CVE browser

CRITICAL

A memory corruption issue was addressed with improved validation

Published Mar 4, 2019

10.0

CRITICAL

CVSS 3.0

EPSS 2.10%

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 12.1.3
Vendor Apple Product iTunes for Windows Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iTunes 12.9.3 for Windows
Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <macOS Mojave 10.14.3
Vendor Apple Product tvOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <tvOS 12.1.2
Vendor Apple Product watchOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <watchOS 5.1.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 12.1.3

Apple

iTunes for Windows

n/a

Version	Status	Constraints
unspecified	affected	<iTunes 12.9.3 for Windows

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<macOS Mojave 10.14.3

Apple

tvOS

n/a

Version	Status	Constraints
unspecified	affected	<tvOS 12.1.2

Apple

watchOS

n/a

Version	Status	Constraints
unspecified	affected	<watchOS 5.1.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (7)

http://www.securityfocus.com/bid/106724
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15802
Advisory
https://support.apple.com/HT209443
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209446
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209447
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209448
x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209450
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106724		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15802		Advisory
https://support.apple.com/HT209443		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209446		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209447		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209448		x_refsource_CONFIRMVendor Advisory
https://support.apple.com/HT209450		x_refsource_CONFIRMVendor Advisory