CVE-2019-8722: Input Validation
ld64. Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.
Other sources
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for ld64 vulnerability?
The vulnerability ID for ld64 vulnerability is CVE-2019-8722.
What is the severity level of CVE-2019-8722?
The severity level of CVE-2019-8722 is critical.
How can this vulnerability be exploited?
This vulnerability can be exploited by compiling code without proper input validation, potentially leading to arbitrary code execution with user privilege.
Which versions of Xcode are affected by CVE-2019-8722?
Xcode versions up to and excluding 11.0 are affected by CVE-2019-8722.
How can I fix CVE-2019-8722?
To fix CVE-2019-8722, update Xcode to version 11.0 or later.