CVE-2019-8841
First published: Tue Dec 10 2019(Updated: )
IOSurfaceAccelerator. An information disclosure issue was addressed by removing the vulnerable code.
Credit: Corellium product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iPadOS | <13.3 | |
| Apple iPhone OS | <13.3 | |
| Apple iOS | <13.3 | 13.3 |
| Apple iPadOS | <13.3 | 13.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT210785 (Advisory)
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is CVE-2019-8841?
CVE-2019-8841 is an information disclosure vulnerability that allows an application to execute arbitrary code with kernel privileges on iOS and iPadOS versions up to 13.3.
What is the severity of CVE-2019-8841?
The severity of CVE-2019-8841 is rated as high, with a severity score of 7.8.
Which software versions are affected by CVE-2019-8841?
iOS and iPadOS versions up to 13.3 are affected by CVE-2019-8841.
How was CVE-2019-8841 fixed?
CVE-2019-8841 was fixed in iOS 13.3 and iPadOS 13.3 by removing the vulnerable code.
Where can I find more information about CVE-2019-8841?
More information about CVE-2019-8841 can be found at the following reference: https://support.apple.com/en-us/HT210785.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- collector/apple-support
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/apple
- canonical/apple ios
- canonical/apple ipados
- canonical/apple iphone os