CVE-2019-8840
published 2020-10-27CVE-2019-8840: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary…
PriorityP349high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.27%
66.5th percentile
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | xcode | < 11.3 | 11.3 |
| apple | xcode | — | — |
| apple | xcode | >= unspecified < 11.3 | 11.3 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Apple
CVE-2019-8840: Xcode 11.3
vendor_apple·2019-12-10·CVSS 8.8
CVE-2019-8840 [HIGH] CVE-2019-8840: Xcode 11.3
Apple Security Update: About the security content of Xcode 11.3
Product: Xcode
Version: 11.3
CVE: CVE-2019-8840
Component: Xcode 11.3
Impact: Compiling with untrusted sources may lead to arbitrary code execution with user privileges
Description: An out-of-bounds read was addressed with improved bounds checking.
GHSA
GHSA-2924-9cv7-3gpq: An out-of-bounds read was addressed with improved bounds checking
ghsa_unreviewed·2022-05-24
CVE-2019-8840 [HIGH] CWE-125 GHSA-2924-9cv7-3gpq: An out-of-bounds read was addressed with improved bounds checking
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-10-27
Published