high7.5Public exploit code
CVE-2019-8646
An out-of-bounds read was addressed with improved input validation.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iMessage - NSKeyedUnarchiver Deserialization Allows file Backed NSData Objects2019-07-30 · dos · multiple · Verified
Impact
An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. A remote attacker may be able to leak memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 12.4 |
| Apple | Mac Os X | before 10.14.6 |
| Apple | Tvos | before 12.4 |
| Apple | Watchos | before 5.3 |