high8.8
CVE-2019-8830
An out-of-bounds read was addressed with improved input validation.
Impact
An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, iOS 13.3 and iPadOS 13.3, iOS 12.4.4, watchOS 5.3.4. Processing malicious video via FaceTime may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ipados | before 13.3 |
| Apple | Iphone Os | before 13.3 from 12.0.0 before 12.4.4 |
| Apple | Mac Os X | before 10.15.2 |
| Apple | Tvos | before 13.3 |
| Apple | Watchos | before 5.3.4 from 6.0.0 before 6.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.apple.com/en-us/HT210785
- https://support.apple.com/en-us/HT210787
- https://support.apple.com/en-us/HT210788
- https://support.apple.com/en-us/HT210789
- https://support.apple.com/en-us/HT210790
- https://support.apple.com/en-us/HT210791
- https://support.apple.com/en-us/HT210785
- https://support.apple.com/en-us/HT210787
- https://support.apple.com/en-us/HT210788
- https://support.apple.com/en-us/HT210789
- https://support.apple.com/en-us/HT210790
- https://support.apple.com/en-us/HT210791