high7.1Public exploit code
CVE-2019-8591
A type confusion issue was addressed with improved memory handling.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple macOS < 10.14.5 / iOS < 12.3 XNU - Wild-read due to bad cast in stf_ioctl2019-05-21 · dos · multiple · Verified
Impact
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 12.3 |
| Apple | Mac Os X | before 10.14.5 |
| Apple | Tvos | before 12.3 |
| Apple | Watchos | before 5.2.1 |