CVE-2019-8647 - A use after free issue was addressed with improved memory management

Back Back to CVE browser

CRITICAL

A use after free issue was addressed with improved memory management

Published Dec 18, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 13.45%

Description

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 12.4
Vendor Apple Product tvOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <tvOS 12.4
Vendor Apple Product watchOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <watchOS 5.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 12.4

Apple

tvOS

n/a

Version	Status	Constraints
unspecified	affected	<tvOS 12.4

Apple

watchOS

n/a

Version	Status	Constraints
unspecified	affected	<watchOS 5.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18037
Advisory
https://support.apple.com/HT210346
x_refsource_MISCVendor Advisory
https://support.apple.com/HT210351
x_refsource_MISCVendor Advisory
https://support.apple.com/HT210353
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18037		Advisory
https://support.apple.com/HT210346		x_refsource_MISCVendor Advisory
https://support.apple.com/HT210351		x_refsource_MISCVendor Advisory
https://support.apple.com/HT210353		x_refsource_MISCVendor Advisory