CVE-2019-8663 (MEDIUM)

Vendor	Product	Version range	Fixed in
apple	ios	—	—
apple	ios	>= unspecified < iOS 12.4	iOS 12.4
apple	iphone_os	< 12.4	12.4
apple	mac_os_x	< 10.14.6	10.14.6
apple	macos	>= unspecified < macOS Mojave 10.14.6	macOS Mojave 10.14.6
apple	macos_mojave_10.14.6_security_update_2019-004_high_sierra_security_update_2019-0	—	—

Apple

CVE-2019-8663: iOS 12.4

vendor_apple·2019-07-22·CVSS 5.3

CVE-2019-8663 [MEDIUM] CVE-2019-8663: iOS 12.4 Apple Security Update: About the security content of iOS 12.4 Product: iOS Version: 12.4 CVE: CVE-2019-8663 Component: Found in Apps Impact: A remote attacker may be able to leak memory Description: This issue was addressed with improved checks.

Apple

CVE-2019-8663: macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra

vendor_apple·2019-07-22·CVSS 5.3

CVE-2019-8663 [MEDIUM] CVE-2019-8663: macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra Apple Security Update: About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra Product: macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra CVE: CVE-2019-8663 Component: Found in Apps Impact: A remote attacker may be able to leak memory Description: This issue was addressed with improved checks.

GHSA

GHSA-43m3-5mhm-q5fc: This issue was addressed with improved checks

ghsa_unreviewed·2022-05-24

CVE-2019-8663 [MEDIUM] GHSA-43m3-5mhm-q5fc: This issue was addressed with improved checks This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6. A remote attacker may be able to leak memory.

Project0

The Fully Remote Attack Surface of the iPhone - Project Zero

project_zero·2019-08-01

CVE-2019-8613 The Fully Remote Attack Surface of the iPhone - Project Zero Posted by Natalie Silvanovich, Project Zero While there have been several rumours and reports of fully remote vulnerabilities affecting the iPhone being used by attackers in the last couple of years, limited information is available about the technical details of these vulnerabilities, as well as the underlying attack surface they occur in. I investigated the remote, interaction-less attack surface of the iPhone, and found several serious vulnerabilities. Vulnerabilities are considered ‘remote’ when the attacker does not require any physical or network proximity to the target to be able to use the vulnerability. Remote vulnerabilities are described as ‘fully remote’, ‘interaction-less’ or ‘zero click’ when they do not require any physical interaction from the target to be exploited, an

CVE-2019-8663: This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6. A remote attacker may be able to leak memory.

Affected