CVE-2019-8850
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13.1 and iPadOS 13.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6. Processing a maliciously crafted audio file may disclose restricted memory.
Published
2020-10-27T21:15:13.277
Last Modified
2024-11-21T04:50:35.730
Status
Modified
Source
[email protected]
Severity
CVSSv3.1: 5.5 (MEDIUM)
CVSSv2 Vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
- Access Vector: NETWORK
- Access Complexity: MEDIUM
- Authentication: NONE
- Confidentiality Impact: PARTIAL
- Integrity Impact: NONE
- Availability Impact: NONE
Exploitability Score
8.6
Impact Score
2.9
Weaknesses
Affected Vendors & Products
References
-
https://support.apple.com/en-us/HT210603
Release Notes, Vendor Advisory
([email protected])
-
https://support.apple.com/en-us/HT210604
Release Notes, Vendor Advisory
([email protected])
-
https://support.apple.com/en-us/HT210607
Release Notes, Vendor Advisory
([email protected])
-
https://support.apple.com/en-us/HT210634
Release Notes, Vendor Advisory
([email protected])
-
https://support.apple.com/en-us/HT210722
Release Notes, Vendor Advisory
([email protected])
-
https://support.apple.com/en-us/HT210603
Release Notes, Vendor Advisory
(af854a3a-2127-422b-91ae-364da2661108)
-
https://support.apple.com/en-us/HT210604
Release Notes, Vendor Advisory
(af854a3a-2127-422b-91ae-364da2661108)
-
https://support.apple.com/en-us/HT210607
Release Notes, Vendor Advisory
(af854a3a-2127-422b-91ae-364da2661108)
-
https://support.apple.com/en-us/HT210634
Release Notes, Vendor Advisory
(af854a3a-2127-422b-91ae-364da2661108)
-
https://support.apple.com/en-us/HT210722
Release Notes, Vendor Advisory
(af854a3a-2127-422b-91ae-364da2661108)