CVE-2019-8718

HIGH

iPhone OS < 13.0 - Remote Code Execution via Memory Corruption

Title source: llm

Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in watchOS 6, iOS 13, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.

References (3)

Core 3

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210604

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210606

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210607

Scores

CVSS v3 7.8

EPSS 0.0123

EPSS Percentile 65.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (3)

apple/iphone_os < 13.0

apple/tvos < 13

apple/watchos < 6.0

Published Oct 27, 2020

Tracked Since Feb 18, 2026