CVE-2019-8734

HIGH

iCloud < 7.14 - Out-of-bounds Write via Malicious Web Content

Title source: llm
STIX 2.1

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

References (7)

Core 7
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210604
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210606
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210607
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210608
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210635
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210636
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT210637

Scores

CVSS v3 8.8
EPSS 0.0136
EPSS Percentile 68.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (6)
apple/icloud < 7.14
apple/iphone_os < 13.0
apple/itunes < 12.10.1
apple/safari < 13.0
apple/tvos < 13
apple/watchos < 6.0
Published Oct 27, 2020
Tracked Since Feb 18, 2026