CVE-2019-8562
published 2019-12-18CVE-2019-8562: A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows. A…
critical9.6CVSS 3.1
AVNACLPRNUIRSCCHIHAH
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios | — | — |
| apple | ios | >= unspecified < iOS 12.2 | iOS 12.2 |
| apple | iphone_os | < 12.2 | 12.2 |
| apple | itunes | < 12.9.4 | 12.9.4 |
| apple | itunes_12.9.4_for_windows | — | — |
| apple | itunes_for_windows | >= unspecified < iTunes 12.9.4 for Windows | iTunes 12.9.4 for Windows |
| apple | safari | < 12.1 | 12.1 |
| apple | safari | — | — |
| apple | safari | >= unspecified < Safari 12.1 | Safari 12.1 |
| apple | tvos | < 12.2 | 12.2 |
| apple | tvos | — | — |
| apple | tvos | >= unspecified < tvOS 12.2 | tvOS 12.2 |
| k8s.io | kubernetes | 0 – 1.18.19 | — |
| k8s.io | kubernetes | 1.19.0 – 1.19.11 | — |
| k8s.io | kubernetes | 1.20.0 – 1.20.7 | — |
| k8s.io | kubernetes | 1.21.0 – 1.21.1 | — |
CVSS provenance
nvdv3.19.6CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
ghsa6.3MEDIUM