CVE-2019-6220: Input Validation

Reference Links

• https://support.apple.com/en-us/HT209446 (Advisory)
• http://www.securityfocus.com/bid/106693
• https://support.apple.com/HT209446

Parent vulnerabilities

(Appears in the following advisories)

• HT209446

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-6235
• CVE-2019-6200
• CVE-2019-6202
• CVE-2019-6221
• CVE-2019-6231
• CVE-2019-6230
• CVE-2019-6224
• CVE-2018-4467
• CVE-2018-4452
• CVE-2019-6214
• CVE-2019-6225
• CVE-2019-6210
• CVE-2019-6205
• CVE-2019-6213
• CVE-2019-6209
• CVE-2019-6208
• CVE-2019-6218
• CVE-2019-6219
• CVE-2019-6220
• CVE-2018-20346
• CVE-2018-20505
• CVE-2018-20506
• CVE-2019-6211

Frequently Asked Questions

• What is CVE-2019-6220?

  CVE-2019-6220 is a vulnerability in QuartzCore in Apple macOS Mojave and earlier versions that allows an application to read restricted memory due to an out-of-bounds read vulnerability.

• What is the severity of CVE-2019-6220?

  The severity of CVE-2019-6220 is medium, with a severity value of 5.5.

• How does CVE-2019-6220 affect macOS Mojave?

  CVE-2019-6220 affects macOS Mojave versions up to but not including 10.14.3, allowing an application to read restricted memory.

• How can I fix CVE-2019-6220 in macOS Mojave?

  To fix CVE-2019-6220 in macOS Mojave, update to version 10.14.3 or later.

• Where can I find more information about CVE-2019-6220?

  You can find more information about CVE-2019-6220 in the following references: [Apple Support](https://support.apple.com/en-us/HT209446), [SecurityFocus](http://www.securityfocus.com/bid/106693), and [Apple HT209446](https://support.apple.com/HT209446).