CVE-2019-8566 - An API issue existed in the handling of microphone data

Back Back to CVE browser

LOW

An API issue existed in the handling of microphone data

Published Dec 18, 2019

3.3

LOW

CVSS 3.1

EPSS 0.69%

Description

An API issue existed in the handling of microphone data. This issue was addressed with improved validation. This issue is fixed in iOS 12.2. A malicious application may be able to access the microphone without indication to the user.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 12.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 12.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17956
Advisory
https://support.apple.com/HT209599
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-17956		Advisory
https://support.apple.com/HT209599		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Dec 18, 2019

Updated Aug 4, 2024

Reserved Feb 18, 2019

Link CVE-2019-8566

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-8566

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-8566

ENISA EUVD

Assigner apple

Published Dec 18, 2019

Updated Aug 4, 2024

Exploited since n/a

Link EUVD-2019-17956

EUVD-2019-17956