First published: Mon May 13 2019(Updated: )
An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A local user may be able to cause unexpected system termination or read kernel memory.
Credit: Brandon Azad Google Project ZeroJunho Jang Hanul Choi LINE Security TeamBrandon Azad Google Project ZeroJunho Jang Hanul Choi LINE Security TeamBrandon Azad Google Project ZeroJunho Jang Hanul Choi LINE Security TeamBrandon Azad Google Project ZeroJunho Jang Hanul Choi LINE Security Team product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iPhone OS | <12.3 | |
Apple Mac OS X | <10.14.5 | |
Apple tvOS | <12.3 | |
Apple watchOS | <5.2.1 | |
Apple watchOS | <5.2.1 | 5.2.1 |
Apple iOS | <12.3 | 12.3 |
Apple tvOS | <12.3 | 12.3 |
Apple macOS Mojave | <10.14.5 | 10.14.5 |
Apple High Sierra | ||
Apple Sierra |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2019-8576 is a vulnerability in the kernel of Apple devices that allows a local user to cause unexpected system termination or read kernel memory.
CVE-2019-8576 has a severity score of 7.1, which is considered high.
CVE-2019-8576 affects macOS Mojave 10.14.5 and could allow a local user to cause unexpected system termination or read kernel memory.
To fix CVE-2019-8576 on iOS 12.3, update to a version beyond 12.3 that includes the fix.
More information about CVE-2019-8576 can be found on Apple's support pages: [reference 1], [reference 2], [reference 3].