high7.8Public exploit code
CVE-2019-6205
A memory corruption issue was addressed with improved lock state checking.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- macOS < 10.14.3 / iOS < 12.1.3 XNU - 'vm_map_copy' Optimization which Requires Atomicity isn't Atomic2019-01-31 · dos · multiple · Verified
Impact
A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause unexpected changes in memory shared between processes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 12.1.3 |
| Apple | Mac Os X | before 10.14.3 |
| Apple | Tvos | before 12.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/156051/XNU-vm_map_copy-Insufficient-Fix.html
- http://www.securityfocus.com/bid/106695
- https://support.apple.com/HT209443
- https://support.apple.com/HT209446
- https://support.apple.com/HT209447
- https://www.exploit-db.com/exploits/46299/
- http://packetstormsecurity.com/files/156051/XNU-vm_map_copy-Insufficient-Fix.html
- http://www.securityfocus.com/bid/106695
- https://support.apple.com/HT209443
- https://support.apple.com/HT209446
- https://support.apple.com/HT209447
- https://www.exploit-db.com/exploits/46299/