CVE-2019-6223: Apple iOS and macOS Group Facetime Vulnerability
First published: Thu Feb 07 2019(Updated: )
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.
Credit: Grant Thompson Catalina Foothills High SchoolDaven Morris ArlingtonTX product-security@apple.com Grant Thompson Catalina Foothills High SchoolDaven Morris ArlingtonTX product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple macOS Mojave Supplemental Update | <10.14.3 | 10.14.3 |
| Apple iPhone OS | <12.1.4 | |
| Apple Mac OS X | <10.14.3 | |
| Apple iOS | <12.1.4 | 12.1.4 |
| Apple iOS and macOS | ||
| <12.1.4 | ||
| <10.14.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is CVE-2019-6223?
CVE-2019-6223 is a vulnerability in Apple iOS and macOS that allows the initiator of a Group FaceTime call to cause the recipient to answer.
How can I be affected by CVE-2019-6223?
You can be affected by CVE-2019-6223 if you are using iOS versions up to 12.1.4, macOS versions up to 10.14.3, or Group FaceTime on Apple devices.
How severe is CVE-2019-6223?
CVE-2019-6223 has a severity rating of 7.5 (high).
How can I fix CVE-2019-6223?
To fix CVE-2019-6223, make sure you have updated your Apple iOS to version 12.1.4 or later, and your macOS to version 10.14.3 Supplemental Update or later.
Where can I find more information about CVE-2019-6223?
You can find more information about CVE-2019-6223 on Apple's official support page: [https://support.apple.com/HT209520](https://support.apple.com/HT209520)
- collector/apple-support
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- agent/software-canonical-lookup-request
- agent/title
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/event
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/apple
- canonical/apple macos mojave supplemental update
- canonical/apple iphone os
- canonical/apple mac os x
- canonical/apple ios
- canonical/apple ios and macos