Memory corruption

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6210

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2019-6227

CVE-2019-6227 is a WebKit-related memory corruption vulnerability that could be triggered by processing malicious web content, potentially leading to arbitrary code execution. The vulnerability is documented in Apple advisories and is fixed in macOS/Safari/WebKit updates: iOS 12.1.3, tvOS 12.1.2,...

CVE-2019-6217

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6214

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox...

CVE-2019-6209

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout...

CVE-2019-6213

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges...

CVE-2019-6202

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. A malicious application may be able to elevate privileges...

CVE-2019-6231

CVE-2019-6231 refers to an out-of-bounds read in CoreAnimation that could allow a malicious app to read restricted memory. The issue was addressed with improved bounds checking and is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3. Connected Apple advisories HT209447 (t...

CVE-2019-6214

CVE-2019-6214 is a type confusion issue in IOKit that can allow a sandboxed process to escape sandbox restrictions. The root cause is memory handling/initialization related to type handling in IOKit. Fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3, per Apple security upd...

CVE-2019-6213

CVE-2019-6213 is a kernel memory corruption vulnerability that could allow an attacker to execute arbitrary code with kernel privileges. Apple’s advisories (HT209447 for tvOS/iOS 12.1.2/12.1.3, HT209443 for iOS 12.1.3, and related Apple security notes) describe a memory corruption issue resolved ...

CVE-2019-6227

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6217

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6217

CVE-2019-6217 is a WebKit/WebKit-related memory corruption issue addressed across Apple platforms. Affected components include WebKit (and related Apple WebKit-based apps) where memory handling flaws allowed processing malicious web content to lead to arbitrary code execution. The published fixes...

CVE-2019-6226

CVE-2019-6226 is a set of memory corruption issues in WebKit that could allow arbitrary code execution when processing maliciously crafted web content. The vulnerability is addressed across multiple Apple platforms and components, with fixes in: iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0...

CVE-2019-6219

CVE-2019-6219 is a denial-of-service vulnerability affecting Apple’s platforms via a malformed message processed by the Natural Language Processing component. The issue arose from insufficient input/validation handling and was addressed by improved validation. According to Apple advisories, the f...

CVE-2019-6216

CVE-2019-6216 concerns multiple memory corruption issues in WebKit-related components. The description indicates the vulnerability is addressed by memory handling improvements and is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, and iCloud for Windows ...

CVE-2019-6219

A denial of service issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. Processing a maliciously crafted message may lead to a denial of service...

CVE-2019-6226

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2019-6224

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution...