CVE-2019-7287

CVE-2019-7287 is described in the connected materials as a memory corruption/heap overflow in Apple iOS, arising from an unchecked memcpy in the IOKit ProvInfoIOKitUserClient::ucEncryptSUInfo() path. The initial description notes a memory corruption fix in iOS 12.1.4 and potential kernel code exe...

PT-2019-19107

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.5 Description A logic issue was addressed with improved restrictions, allowing an application to potentially execute arbitrary code with kernel privileges. Recommendations For versions prior to 10.14.5, update to...

CVE-2019-8747: Out-of-bounds Write

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-7287: Out-of-bounds Write

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8748: Out-of-bounds Write

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8590: Undefined Security Weakness

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-7287

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges. Recent assessments: gwillcox-r7 at November 22, 2020 2:38am UTC reported: Reported as exploited in the wild as pa...

PT-2019-19187

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 6.1 Description A memory corruption issue was addressed through improved locking, allowing an application to potentially execute arbitrary code with kernel privileges. Recommendations For versions prior to 6.1, update...

PT-2019-19210

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15 Description A memory corruption issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges. Recommendations For versions prior to 10.15...

PT-2019-19090

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 Description A buffer overflow issue was addressed through improved size validation, which could allow a malicious application to execute arbitrary code with kernel privileges. Recommendations For versions prior ...

PT-2019-19164

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15 tvOS versions prior to 13 Description A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges. Recommendations Fo...

PT-2019-19153

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.6 Description A memory corruption issue was addressed with improved memory handling, allowing an application to potentially execute arbitrary code with kernel privileges. Recommendations For versions prior to...

CVE-2019-8529: Out-of-bounds Write

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8555: Improper Restriction of Operations within the Bounds of a Memory Buffer

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2019-8717: Out-of-bounds Write

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15, tvOS 13. An application may be able to execute arbitrary code with kernel privileges...

Unspecified vulnerability in Apple macOS Catalina Kernel component (CNVD-2019-46117)

Apple macOS Catalina is a kernel component of Apple's proprietary operating system for Mac computers. A security vulnerability exists in the Kernel component in Apple macOS Catalina versions prior to 10.15.2. The vulnerability can be exploited by an attacker to execute arbitrary code with kernel...

Apple iOS and iPadOS IOSurfaceAccelerator Component Information Disclosure Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. An information disclosure vulnerability exists in the IOSurfaceAccelerator component in Apple iOS prior to 13....

Unspecified Vulnerability in Kernel Component of Multiple Apple Products (CNVD-2019-46123)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple iPadOS is an operating system for iPad tablets.Kernel is one of the kernels. A security vulnerability exists in the Kernel component of several Apple products. An attacker can exploit thi...

Unspecified Vulnerability in Apple macOS Catalina Kernel Component

Apple macOS Catalina is a kernel component of Apple's proprietary operating system for Mac computers. A security vulnerability exists in the Kernel component in Apple macOS Catalina versions prior to 10.15.2. An attacker can exploit this vulnerability to execute arbitrary code with kernel...

Multiple Apple Products IOUSBDeviceFamily Component Memory Corruption Vulnerability

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. iOUSBDeviceFamily is one of the components that support communication between devic...