7.8

CVE-2019-8592

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, iOS 13. Playing a malicious audio file may lead to arbitrary code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ iPhone OS Version < 12.3
Apple ≫ iPhone OS Version >= 12.3.1 < 13.0
Apple ≫ macOS X Version >= 10.12.6 <= 10.14.5
Apple ≫ macOS X Version >= 10.14.6 < 10.15
Apple ≫ tvOS Version < 12.3
Apple ≫ tvOS Version >= 12.4 < 13
Apple ≫ watchOS Version < 5.2.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.22% 0.646
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://support.apple.com/en-us/HT210634
Vendor Advisory
https://support.apple.com/en-us/HT210722
Vendor Advisory
https://support.apple.com/en-us/HT210119
Vendor Advisory
https://support.apple.com/en-us/HT210118
Vendor Advisory
https://support.apple.com/en-us/HT210122
Vendor Advisory
https://support.apple.com/en-us/HT210120
Vendor Advisory
https://support.apple.com/en-us/HT210604
Vendor Advisory
https://support.apple.com/en-us/HT210606
Vendor Advisory