LOW
An API issue existed in the handling of dictation requests
Published Dec 18, 2019
3.3
LOWCVSS 3.1
EPSS 0.80%
Description
An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to initiate a Dictation request without user authorization.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<iOS 12.2
- Version
-
- Version unspecifiedStatusaffectedConstraints<macOS Mojave 10.14.4
- Version
-
- Version unspecifiedStatusaffectedConstraints<tvOS 12.2
- Version
-
- Version unspecifiedStatusaffectedConstraints<watchOS 5.2
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Apple | iOS | n/a |
| ||||||
| Apple | macOS | n/a |
| ||||||
| Apple | tvOS | n/a |
| ||||||
| Apple | watchOS | n/a |
|
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://support.apple.com/HT209599 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT209600 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT209601 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT209602 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://support.apple.com/HT209599 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT209600 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT209601 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT209602 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Dec 18, 2019
Updated Aug 4, 2024
Reserved Feb 18, 2019
Link CVE-2019-8502
CISA Vulnrichment
Updated n/a