CVE-2019-8662 - This issue was addressed with improved checks

Back Back to CVE browser

CRITICAL

This issue was addressed with improved checks

Published Dec 18, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 9.78%

Description

This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 12.4
Vendor Apple Product macOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <macOS Mojave 10.14.6
Vendor Apple Product tvOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <tvOS 12.4
Vendor Apple Product watchOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <watchOS 5.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 12.4

Apple

macOS

n/a

Version	Status	Constraints
unspecified	affected	<macOS Mojave 10.14.6

Apple

tvOS

n/a

Version	Status	Constraints
unspecified	affected	<tvOS 12.4

Apple

watchOS

n/a

Version	Status	Constraints
unspecified	affected	<watchOS 5.3

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-416

Use After Free

CWE-502

Deserialization of Untrusted Data

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18052
Advisory
https://support.apple.com/HT210346
x_refsource_MISCVendor Advisory
https://support.apple.com/HT210348
x_refsource_MISCVendor Advisory
https://support.apple.com/HT210351
x_refsource_MISCVendor Advisory
https://support.apple.com/HT210353
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-18052		Advisory
https://support.apple.com/HT210346		x_refsource_MISCVendor Advisory
https://support.apple.com/HT210348		x_refsource_MISCVendor Advisory
https://support.apple.com/HT210351		x_refsource_MISCVendor Advisory
https://support.apple.com/HT210353		x_refsource_MISCVendor Advisory