CVE-2019-8525

published 2020-10-27

CVE-2019-8525: A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, watchOS 5.2, macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra, iOS 12.2. An application may be able to execute arbitrary code with kernel privileges.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	ios	>= unspecified < 12.2	12.2
apple	iphone_os	< 12.2	12.2
apple	mac_os_x	>= 10.12.6 < 10.14.5	10.14.5
apple	mac_os_x	>= 10.14.3 < 10.14.4	10.14.4
apple	macos	>= unspecified < 10.14	10.14
apple	macos	>= unspecified < 5.2	5.2
apple	macos_mojave_10.14.4_security_update_2019-002_high_sierra_security_update_2019-0	—	—
apple	macos_mojave_10.14.5_security_update_2019-003_high_sierra_security_update_2019-0	—	—
apple	tvos	—	—
apple	watchos	< 5.2	5.2
apple	watchos	—	—

CWE-787