NetSight
IP …
high8.8Public exploit code

CVE-2019-8820

Multiple memory corruption issues were addressed with improved memory handling.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

VendorProductAffected versions
AppleIcloud
before 7.15
from 10.0 before 10.8
AppleItunes
before 12.10.2
AppleSafari
before 13.0.3
AppleIpados
before 13.2
AppleIphone Os
before 13.2
AppleTvos
before 13.2
AppleWatchos
before 6.1

Weakness classification

CWE-787

References