Vulnerability Description
An API issue existed in the handling of outgoing phone calls initiated with Siri. This issue was addressed with improved state handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. Calls made using Siri may be initiated using the wrong cellular plan on devices with two active plans.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Apple | Ipados | < 13.3 |
| Apple | Iphone Os | < 13.3 |
| Apple | Mac Os X | < 10.15.2 |
| Apple | Watchos | < 6.1.1 |
References
- https://support.apple.com/en-us/HT210785Release NotesVendor Advisory
- https://support.apple.com/en-us/HT210788Release NotesVendor Advisory
- https://support.apple.com/en-us/HT210789Release NotesVendor Advisory
- https://support.apple.com/en-us/HT210785Release NotesVendor Advisory
- https://support.apple.com/en-us/HT210788Release NotesVendor Advisory
- https://support.apple.com/en-us/HT210789Release NotesVendor Advisory
FAQ
What is CVE-2019-8856?
CVE-2019-8856 is a vulnerability with a CVSS score of 3.3 (LOW). An API issue existed in the handling of outgoing phone calls initiated with Siri. This issue was addressed with improved state handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1,...
How severe is CVE-2019-8856?
CVE-2019-8856 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-8856?
Check the references section above for vendor advisories and patch information. Affected products include: Apple Ipados, Apple Iphone Os, Apple Mac Os X, Apple Watchos.