CVE-2019-8774

MEDIUM

iPadOS < 13.1 - Denial of Service via Maliciously Crafted iBooks File

Title source: llm

Description

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Parsing a maliciously crafted iBooks file may lead to a persistent denial-of-service.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210634

Vendor Advisory x_refsource_misc

https://support.apple.com/en-us/HT210603

Scores

CVSS v3 5.5

EPSS 0.0061

EPSS Percentile 44.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-20 CWE-400

Status published

Products (3)

apple/ipad_os < 13.1

apple/iphone_os < 13.1

apple/mac_os_x < 10.15

Published Oct 27, 2020

Tracked Since Feb 18, 2026