CVE-2019-8647: Use After Free

Reference Links

• https://support.apple.com/en-us/HT210346 (Advisory)
• https://support.apple.com/en-us/HT210351 (Advisory)
• https://support.apple.com/en-us/HT210353 (Advisory)
• https://support.apple.com/HT210346
• https://support.apple.com/HT210351
• https://support.apple.com/HT210353

Parent vulnerabilities

(Appears in the following advisories)

• HT210353
• HT210351
• HT210346

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-9506
• CVE-2020-10135
• CVE-2019-8646
• CVE-2019-8647
• CVE-2019-8660
• CVE-2019-8624
• CVE-2019-8648
• CVE-2018-16860
• CVE-2019-8668
• CVE-2019-8633
• CVE-2019-13118
• CVE-2019-8659
• CVE-2019-8665
• CVE-2019-8662
• CVE-2019-8657
• CVE-2019-8682
• CVE-2019-8658
• CVE-2019-8669
• CVE-2019-8672
• CVE-2019-8676
• CVE-2019-8683
• CVE-2019-8684
• CVE-2019-8685
• CVE-2019-8688
• CVE-2019-8689
• CVE-2019-8702
• CVE-2019-8698
• CVE-2019-8690
• CVE-2019-8649
• CVE-2019-8644
• CVE-2019-8666
• CVE-2019-8671
• CVE-2019-8673
• CVE-2019-8677
• CVE-2019-8678
• CVE-2019-8679
• CVE-2019-8680
• CVE-2019-8681
• CVE-2019-8686
• CVE-2019-8687
• CVE-2019-8663
• CVE-2019-8699

Frequently Asked Questions

• What is CVE-2019-8647?

  CVE-2019-8647 is a use after free vulnerability in Core Data that allows remote attackers to execute arbitrary code.

• How does CVE-2019-8647 affect iOS?

  CVE-2019-8647 affects iOS versions up to, but not including, 12.4.

• How does CVE-2019-8647 affect tvOS?

  CVE-2019-8647 affects tvOS versions up to, but not including, 12.4.

• How does CVE-2019-8647 affect watchOS?

  CVE-2019-8647 affects watchOS versions up to, but not including, 5.3.

• How can I fix CVE-2019-8647?

  To fix CVE-2019-8647, update your iOS device to version 12.4 or later, tvOS device to version 12.4 or later, or watchOS device to version 5.3 or later.