CVE-2019-8745

HIGH

iCloud < 7.14 - Buffer Overflow via Maliciously Crafted Text File

Title source: llm
STIX 2.1

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210635
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210636
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210637
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210634
Vendor Advisory x_refsource_confirm
https://support.apple.com/kb/HT210722

Scores

CVSS v3 8.8
EPSS 0.0222
EPSS Percentile 80.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (4)
apple/icloud < 7.14
apple/itunes < 12.10.1
apple/mac_os_x < 10.15
apple/tvos < 13
Published Dec 18, 2019
Tracked Since Feb 18, 2026