Description
The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos .
References (2)
Core 2
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209520
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209521
Scores
CVSS v3
9.8
EPSS
0.0138
EPSS Percentile
69.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (2)
apple/iphone_os
< 12.1.4
apple/mac_os_x
< 10.14.3
Published
Oct 27, 2020
Tracked Since
Feb 18, 2026