Vulnerability Description
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Icloud | < 7.14 |
| Apple | Itunes | < 12.10.1 |
| Apple | Iphone Os | < 13.1 |
| Apple | Mac Os X | < 10.15 |
| Apple | Tvos | < 13 |
| Apple | Watchos | < 6.0 |
Related Weaknesses (CWE)
References
- https://support.apple.com/en-us/HT210604Vendor Advisory
- https://support.apple.com/en-us/HT210606Vendor Advisory
- https://support.apple.com/en-us/HT210607Vendor Advisory
- https://support.apple.com/en-us/HT210634Vendor Advisory
- https://support.apple.com/en-us/HT210635Vendor Advisory
- https://support.apple.com/en-us/HT210636Vendor Advisory
- https://support.apple.com/en-us/HT210637Vendor Advisory
- https://support.apple.com/en-us/HT210722Vendor Advisory
- https://support.apple.com/en-us/HT210604Vendor Advisory
- https://support.apple.com/en-us/HT210606Vendor Advisory
- https://support.apple.com/en-us/HT210607Vendor Advisory
- https://support.apple.com/en-us/HT210634Vendor Advisory
- https://support.apple.com/en-us/HT210635Vendor Advisory
- https://support.apple.com/en-us/HT210636Vendor Advisory
- https://support.apple.com/en-us/HT210637Vendor Advisory
FAQ
What is CVE-2019-8746?
CVE-2019-8746 is a vulnerability with a CVSS score of 9.8 (CRITICAL). An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15...
How severe is CVE-2019-8746?
CVE-2019-8746 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-8746?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Icloud, Apple Itunes, Apple Iphone Os, Apple Mac Os X, Apple Tvos.