Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-8598

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to read restricted memory.

Published

2019-12-18T18:15:28.240

Last Modified

2024-11-21T04:50:08.720

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: NONE

Exploitability Score

8.6

Impact Score

2.9

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apple	icloud	< 7.12	Yes
Application	apple	itunes	< 12.9.5	Yes
Operating System	apple	iphone_os	< 12.3	Yes
Operating System	apple	mac_os_x	< 10.14.5	Yes
Operating System	apple	tvos	< 12.3	Yes
Operating System	apple	watchos	< 5.2.1	Yes

References

https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/ ([email protected])
https://support.apple.com/HT210118 Vendor Advisory ([email protected])
https://support.apple.com/HT210119 Vendor Advisory ([email protected])
https://support.apple.com/HT210120 Vendor Advisory ([email protected])
https://support.apple.com/HT210122 Vendor Advisory ([email protected])
https://support.apple.com/HT210124 Vendor Advisory ([email protected])
https://support.apple.com/HT210125 Vendor Advisory ([email protected])
https://support.apple.com/HT210212 Vendor Advisory ([email protected])
https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/ (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT210118 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT210119 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT210120 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT210122 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT210124 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT210125 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT210212 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)