critical9.8Public exploit code
CVE-2019-8662
This issue was addressed with improved checks.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iMessage - Decoding NSSharedKeyDictionary can read ObjC Object at Attacker Controlled Address2019-11-11 · dos · multiple · Verified
- macOS / iOS NSKeyedUnarchiver - Use-After-Free of ObjC Objects when Unarchiving OITSUIntDictionary Instances2019-07-30 · dos · multiple · Verified
Impact
This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Iphone Os | before 12.4 |
| Apple | Mac Os X | before 10.14.6 |
| Apple | Tvos | before 12.4 |
| Apple | Watchos | before 5.3 |