Description
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/106724
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT209446
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT209443
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT209450
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT209448
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT209447
Scores
CVSS v3
10.0
EPSS
0.0210
EPSS Percentile
79.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (5)
apple/iphone_os
< 12.1.3
apple/itunes
< 12.9.3
apple/mac_os_x
< 10.14.3
apple/tv_os
< 12.1.2
apple/watch_os
< 5.1.3
Published
Mar 04, 2019
Tracked Since
Feb 18, 2026