high7.5Known exploited
CVE-2019-6223
Apple iOS and macOS Group Facetime Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.
Apply updates per vendor instructions.
Impact
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 12.1.4 |
| Apple | Mac Os X | before 10.14.3 |