CVE-2019-6209

published 2019-03-05

CVE-2019-6209: An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS…

medium 5.5 CVSS 3.0

AV L AC L PR N UI R S U C H I N A N

EXPLOIT

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	ios	>= unspecified < iOS 12.1.3	iOS 12.1.3
apple	iphone_os	< 12.1.3	12.1.3
apple	mac_os_x	< 10.14.3	10.14.3
apple	macos	>= unspecified < macOS Mojave 10.14.3	macOS Mojave 10.14.3
apple	macos_mojave_10.14.3_security_update_2019-001_high_sierra_security_update_2019-0	—	—
apple	tv_os	< 12.1.2	12.1.2
apple	tvos	—	—
apple	tvos	>= unspecified < tvOS 12.1.2	tvOS 12.1.2
apple	watchos	< 5.1.3	5.1.3
apple	watchos	—	—
apple	watchos	>= unspecified < watchOS 5.1.3	watchOS 5.1.3

CWE-125