First published: Mon Mar 25 2019(Updated: )
GeoServices. A memory corruption issue was addressed with improved validation.
Credit: an anonymous researcher an anonymous researcher an anonymous researcher product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | <12.2 | |
Apple tvOS | <12.2 | |
Apple watchOS | <5.2 | |
Apple tvOS | <12.2 | 12.2 |
Apple iOS | <12.2 | 12.2 |
Apple watchOS | <5.2 | 5.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2019-8553 is a memory corruption issue in GeoServices that can lead to arbitrary code execution when clicking a malicious SMS link.
CVE-2019-8553 affects iOS up to version 12.2, tvOS up to version 12.2, and watchOS up to version 5.2.
To fix CVE-2019-8553, update to iOS 12.2, tvOS 12.2, or watchOS 5.2.
CVE-2019-8553 has a severity rating of 8.8 (high).
You can find more information about CVE-2019-8553 on Apple's support page: [link](https://support.apple.com/en-us/HT209601)