First published: Tue Sep 24 2019(Updated: )
libxslt. Multiple memory corruption issues were addressed with improved input validation.
Credit: found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz found by OSS-Fuzz product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iTunes for Windows | <12.10.1 | 12.10.1 |
Apple macOS Catalina | <10.15 | 10.15 |
Apple macOS Catalina | <10.15.1 | 10.15.1 |
Apple watchOS | <6.1 | 6.1 |
Apple tvOS | <13 | 13 |
Apple iOS | <13.1 | 13.1 |
Apple iPadOS | <13.1 | 13.1 |
Apple Icloud Windows | <10.8 | |
Apple watchOS | <6.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Appears in the following advisories)
(Found alongside the following vulnerabilities)
CVE-2019-8750 is a vulnerability in libxslt that allows for multiple memory corruption issues due to improved input validation.
CVE-2019-8750 has a severity rating of 9.8 (Critical).
macOS Catalina versions up to 10.15.1 are affected by CVE-2019-8750.
To fix CVE-2019-8750 on macOS Catalina, update to version 10.15.1 or later.
iCloud for Windows versions up to 11.0 and watchOS versions up to 6.1 are also affected by CVE-2019-8750.