CVE-2019-8740
published 2020-10-27CVE-2019-8740: A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may…
PriorityP340high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.30%
70.2th percentile
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | ios_13.1_and_ipados | — | — |
| apple | ios_and_ipados | >= unspecified < 13.1 | 13.1 |
| apple | ipad_os | < 13.1 | 13.1 |
| apple | iphone_os | < 13.1 | 13.1 |
| apple | tvos | < 13 | 13 |
| apple | tvos | — | — |
| apple | tvos | >= unspecified < 13 | 13 |
| apple | watchos | < 6.0 | 6.0 |
| apple | watchos | >= unspecified < 6 | 6 |
| apple | watchos_6 | — | — |
| ghost | sqlite3 | >= 0 < 3.11.0-1ubuntu1.3 | 3.11.0-1ubuntu1.3 |
| ghost | sqlite3 | >= 0 < 3.11.0-1ubuntu1.5 | 3.11.0-1ubuntu1.5 |
| ghost | sqlite3 | >= 0 < 3.22.0-1ubuntu0.2 | 3.22.0-1ubuntu0.2 |
| ghost | sqlite3 | >= 0 < 3.22.0-1ubuntu0.4 | 3.22.0-1ubuntu0.4 |
| ghost | sqlite3 | >= 0 < 3.31.1-4ubuntu0.1 | 3.31.1-4ubuntu0.1 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2019-8740: tvOS 13
vendor_apple·2019-09-24·CVSS 7.8
CVE-2019-8740 [HIGH] CVE-2019-8740: tvOS 13
Apple Security Update: About the security content of tvOS 13
Product: tvOS
Version: 13
CVE: CVE-2019-8740
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption vulnerability was addressed with improved locking.
Apple
CVE-2019-8740: iOS 13.1 and iPadOS 13.1
vendor_apple·2019-09-24·CVSS 7.8
CVE-2019-8740 [HIGH] CVE-2019-8740: iOS 13.1 and iPadOS 13.1
Apple Security Update: About the security content of iOS 13.1 and iPadOS 13.1
Product: iOS 13.1 and iPadOS
Version: 13.1
CVE: CVE-2019-8740
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption vulnerability was addressed with improved locking.
Apple
CVE-2019-8740: watchOS 6
vendor_apple·2019-09-19·CVSS 7.8
CVE-2019-8740 [HIGH] CVE-2019-8740: watchOS 6
Apple Security Update: About the security content of watchOS 6
Product: watchOS 6
CVE: CVE-2019-8740
Component: Kernel
Impact: An application may be able to execute arbitrary code with kernel privileges
Description: A memory corruption vulnerability was addressed with improved locking.
GHSA
GHSA-cfj2-6prp-5xvj: A memory corruption vulnerability was addressed with improved locking
ghsa_unreviewed·2022-05-24
CVE-2019-8740 [HIGH] GHSA-cfj2-6prp-5xvj: A memory corruption vulnerability was addressed with improved locking
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. An application may be able to execute arbitrary code with kernel privileges.
OSV
sqlite3 vulnerabilities
osv·2020-06-10·CVSS 7.5
CVE-2018-8740 sqlite3 vulnerabilities
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled certain corruped schemas.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 18.04 LTS. (CVE-2018-8740)
It was discovered that SQLite incorrectly handled certain SELECT
statements. An attacker could possibly use this issue to cause a denial of
service. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19603)
It was discovered that SQLite incorrectly handled certain self-referential
views. An attacker could possibly use this issue to cause a denial of
service. This issue was only addressed in Ubuntu 19.10. (CVE-2019-19645)
Henry Liu discovered that SQLite incorrectly handled certain malformed
window-function queries. An attacker could possibly use this is
OSV
sqlite3 vulnerabilities
osv·2019-12-02·CVSS 7.5
CVE-2018-8740 sqlite3 vulnerabilities
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled certain schemas.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 12.04 ESM. (CVE-2018-8740)
It was discovered that SQLite incorrectly handled certain schemas.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 19.04.
(CVE-2019-16168)
It was discovered that SQLite incorrectly handled certain schemas.
An attacker could possibly use this issue to mishandles some expressions.
This issue only affected Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-19242)
It was discovered that SQLite incorrectly handled certain queries.
An attacker could possibly use this issue to execute arbitr
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-27
Published