critical9.8Public exploit code
CVE-2019-8647
A use after free issue was addressed with improved memory management.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iMessage - NSArray Deserialization can Invoke Subclass that does not Retain References2019-07-30 · dos · multiple · Verified
Impact
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.4, tvOS 12.4, watchOS 5.3. A remote attacker may be able to cause arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 12.4 |
| Apple | Tvos | before 12.4 |
| Apple | Watchos | before 5.3 |