CVE-2019-8638

HIGH

iCloud < 7.11 - Memory Corruption via Malicious Web Content

Title source: llm
STIX 2.1

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 5.2, iCloud for Windows 7.11, iOS 12.2, iTunes 12.9.4 for Windows, Safari 12.1. Processing maliciously crafted web content may lead to arbitrary code execution.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209599
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209602
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209603
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209604
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT209605

Scores

CVSS v3 8.8
EPSS 0.0122
EPSS Percentile 65.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (5)
apple/icloud < 7.11
apple/iphone_os < 12.2
apple/itunes < 12.9.4
apple/safari < 12.1
apple/watchos < 5.2
Published Oct 27, 2020
Tracked Since Feb 18, 2026