CVE-2019-8578: Use After Free

Q: What is CVE-2019-8578?

CVE-2019-8578 is a use after free vulnerability in the AirPort Base Station Firmware.

Q: What is the severity of CVE-2019-8578?

The severity of CVE-2019-8578 is critical with a CVSS score of 9.8.

Q: How does CVE-2019-8578 impact AirPort Base Station Firmware?

CVE-2019-8578 can allow a remote attacker to cause arbitrary code execution.

Q: Which versions of AirPort Base Station Firmware are affected by CVE-2019-8578?

AirPort Base Station Firmware versions up to and including 7.8.1 are affected by CVE-2019-8578.

Q: How can I fix CVE-2019-8578?

You can fix CVE-2019-8578 by updating to AirPort Base Station Firmware version 7.9.1 or later.

Published May 30, 2019

Updated

A use after free issue was addressed with improved memory management. This issue is fixed in AirPort Base Station Firmware Update 7.8.1, AirPort Base Station Firmware Update 7.9.1. A remote attacker may be able to cause arbitrary code execution.

Other sources

AirPort Base Station Firmware. A use after free issue was addressed with improved memory management.

Credit

Maxime Villard

Affected Software

3 affected componentsFixes available

Apple AirPort Base Station Firmware Update<7.9.1

7.9.1

Apple AirPort Base Station Firmware Update<7.8.1

7.8.1

Apple AirPort Base Station Firmware<7.8.1

Event History

Oct 27, 2020

CVE Published

via MITRE·07:27 PM

Data Sourced

via MITRE·07:27 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2019-8578?

CVE-2019-8578 is a use after free vulnerability in the AirPort Base Station Firmware.

What is the severity of CVE-2019-8578?