Published: 18/12/2019 Updated: 24/08/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple iphone os
apple mac os x
apple tvos
apple watchos

There is a memory corruption vulnerability when decoding an object of class NSKnownKeysDictionary1 This class decodes an object of type NSKnownKeysMappingStrategy1, which decodes a length member which is supposed to represent the length of the keys of the dictionary However, this member is decoded before the keys are decoded, so if a key is an i ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10146, Security Update 2019-004 Hig ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 124  <!--X-Head-o ...

Latest ios RCE Vulnerability disclosed by Google Security Researcher

ios-RCE-Vulnerability Latest ios RCE Vulnerability disclosed by Google Security Researcher the details has been taken from: thehackernewscom/2019/07/apple-ios-vulnerabilitieshtml ===================================================================================================== CVE-2019-8647 (RCE via iMessage) — This is a use-after-free vulnerability that resi

It's 2019 and you can still pwn an iPhone with a website: Apple patches up iOS, Mac bugs in July security hole dump

The Register • Shaun Nichols in San Francisco • 23 Jul 2019

20 WebKit flaws among latest batch of bug fixes Patch now before you get your NAS kicked: Iomega storage boxes leave millions of files open to the internet

On Monday Apple released a fresh round of security fixes for a load of its operating systems and applications. The July patch batch addresses vulnerabilities in iOS, MacOS, Safari, watchOS, and tvOS, though many of the updates are for common components across each of the platforms, such as the WebKit browser engine. These should be installed as soon as possible. For iOS, the 12.4 update brings a total of 37 fixes for various components in the mobile operating system. More than half of those CVE-...

CVE-2019-8660

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

Github Repositories

Recent Articles

References

Vulmon Search

About

Products

Connect