CVE-2019-8750

CRITICAL

iCloud < 10.8 and watchOS < 6.1 - Out-of-bounds Write in libxslt

Title source: llm
STIX 2.1

Description

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0. Multiple issues in libxslt.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210724
Vendor Advisory x_refsource_misc
https://support.apple.com/HT210727

Scores

CVSS v3 9.8
EPSS 0.0163
EPSS Percentile 73.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (2)
apple/icloud < 10.8
apple/watchos < 6.1
Published Dec 18, 2019
Tracked Since Feb 18, 2026