CVE-2019-8635 — Double Free in Apple Macos

CWE-415 — Double Free CWE-787 — Out-of-bounds Write10 documents4 sources

Severity

7.8HIGHNVD

EPSS

0.0%

top 84.86%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apple Macos Apple MAC OS X Apple Macos Mojave 10.14.5 Security Update 2019-003 High Sierra Security Update 2019-0

Timeline

PublishedDec 18

Latest updateMay 24

Description

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute arbitrary code with system privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶Appleapple/macos_mojave_10.14.5_security_update_2019-003_high_sierra_security_update_2019-0

▶CVEListV5apple/macosunspecified — macOS Mojave 10.14.5

▶NVDapple/mac_os_x< 10.14.5

🔴Vulnerability Details

GHSA

GHSA-mj55-6p4q-86f4: A memory corruption issue was addressed with improved memory handling↗2022-05-24

▶

📋Vendor Advisories

Apple

CVE-2019-8635: macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra↗2019-05-13

▶