CVE-2019-8724: Input Validation
Published Sep 20, 2019
·Updated
ld64. Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4.
Other sources
Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.
Credit
Pan ZhenPeng(Qihoo 360 Nirvan Team)
Affected Software
2 affected componentsFixes available
Apple Xcode<11.0
11.0
Apple Xcode<11.0
Event History
Dec 18, 2019
CVE Published
via MITRE·05:33 PM
Data Sourced
via MITRE·05:33 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-8724.
2
What is the severity of CVE-2019-8724?
The severity of CVE-2019-8724 is critical with a CVSS score of 8.8.
3
What is ld64?
ld64 is a linker used in the Xcode toolchains.
4
How can I fix CVE-2019-8724?
To fix CVE-2019-8724, update Xcode to version 11.0 or higher.
5
Where can I find more information about CVE-2019-8724?
You can find more information about CVE-2019-8724 on the Apple support page: https://support.apple.com/HT210609