CVE-2019-25071: Apple iOS Siri Self privileges management
First published: Sat Jun 25 2022(Updated: )
A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been disclosed to the public. The existence and implications of this vulnerability are doubted by Apple even though multiple public videos demonstrating the attack exist. Upgrading to version 13.0 migt be able to address this issue. It is recommended to upgrade affected devices. NOTE: Apple claims, that after examining the report they do not see any actual security implications.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| iPhone OS | <13.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-25071?
CVE-2019-25071 has been declared as critical due to its ability to enable remote command execution.
How do I fix CVE-2019-25071?
To mitigate CVE-2019-25071, update your device to iPhone OS version 13.0 or later.
Which devices are affected by CVE-2019-25071?
CVE-2019-25071 affects Apple iPhone devices running iPhone OS up to version 12.4.1.
What functionality does CVE-2019-25071 exploit?
CVE-2019-25071 exploits Siri, allowing it to be initiated by playing an audio or video file.
What type of commands can be executed due to CVE-2019-25071?
CVE-2019-25071 could allow the execution of arbitrary commands remotely through Siri.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/iphone os