CVE-2019-8558

HIGH

iCloud < 7.11 - Memory Corruption and Arbitrary Code Execution

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-8558. PoCs published by Google Security Research.

AI-analyzed exploit summary This exploit triggers a use-after-free vulnerability in JavaScriptCore by manipulating watchpoints and garbage collection during JIT compilation, leading to a crash due to accessing freed memory.

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Google Security Research · javascriptdosmultiple

https://www.exploit-db.com/exploits/46650

View Code ZIP pw:eip

This exploit triggers a use-after-free vulnerability in JavaScriptCore by manipulating watchpoints and garbage collection during JIT compilation, leading to a crash due to accessing freed memory.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Complex

Reliability

Reliable

Target: WebKit JavaScriptCore (affected versions include those up to the reported CVE date)

No auth needed

Prerequisites: A target system running a vulnerable version of JavaScriptCore

MITRE ATT&CK

T1190 - Exploit Public-Facing Application

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →