CVE-2019-8712

CRITICAL

iPhone OS < 13.1 - Remote Code Execution via Memory Corruption

Title source: llm

Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with system privileges.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210604

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210606

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210607

Scores

CVSS v3 9.8

EPSS 0.0269

EPSS Percentile 84.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (3)

apple/iphone_os < 13.1

apple/tvos < 13

apple/watchos < 6.0

Published Oct 27, 2020

Tracked Since Feb 18, 2026