Published: 27/10/2020 Updated: 30/10/2020

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, iOS 13.3 and iPadOS 13.3, iOS 12.4.4, watchOS 5.3.4. Processing malicious video via FaceTime may lead to arbitrary code execution.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple ipados
apple iphone os
apple mac os x
apple tvos
apple watchos

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-12-10-1 iOS 133 and iPadOS 133   From: Apple Prod ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-12-10-3 macOS Catalina 10152, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra <! ...

Full Disclosure mailing list archives   By Date By Thread </form>    APPLE-SA-2019-12-10-2 iOS 1244   From: Apple Product Security v ...

CWE-125 https://support.apple.com/en-us/HT210791 https://support.apple.com/en-us/HT210790 https://support.apple.com/en-us/HT210788 https://support.apple.com/en-us/HT210787 https://support.apple.com/en-us/HT210789 https://support.apple.com/en-us/HT210785 https://nvd.nist.gov http://seclists.org/fulldisclosure/2019/Dec/23

CVE-2019-8830

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect