CVE-2019-8542

published 2019-12-18

CVE-2019-8542: A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious application may be able to elevate privileges.

Affected

18 ranges

Vendor	Product	Version range	Fixed in
apple	icloud	< 7.11	7.11
apple	icloud_for_windows	—	—
apple	icloud_for_windows	>= unspecified < iCloud for Windows 7.11	iCloud for Windows 7.11
apple	ios	—	—
apple	ios	>= unspecified < iOS 12.2	iOS 12.2
apple	iphone_os	< 12.2	12.2
apple	itunes	< 12.9.4	12.9.4
apple	itunes_12.9.4_for_windows	—	—
apple	itunes_for_windows	>= unspecified < iTunes 12.9.4 for Windows	iTunes 12.9.4 for Windows
apple	mac_os_x	< 10.14.4	10.14.4
apple	macos	>= unspecified < macOS Mojave 10.14.4	macOS Mojave 10.14.4
apple	macos_mojave_10.14.4_security_update_2019-002_high_sierra_security_update_2019-0	—	—
apple	tvos	< 12.2	12.2
apple	tvos	—	—
apple	tvos	>= unspecified < tvOS 12.2	tvOS 12.2
apple	watchos	< 5.2	5.2
apple	watchos	—	—
apple	watchos	>= unspecified < watchOS 5.2	watchOS 5.2

CWE-120