CVE-2019-8657

Summary

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. Parsing a maliciously crafted office document may lead to an unexpected application termination or arbitrary code execution.

Affected Software

VendorProductVersion RangeStatus
AppleiOSunspecified < iOS 12.4affected
ApplemacOSunspecified < macOS Mojave 10.14.6affected
AppletvOSunspecified < tvOS 12.4affected
ApplewatchOSunspecified < watchOS 5.3affected

Weaknesses

  • Parsing a maliciously crafted office document may lead to an unexpected application termination or arbitrary code execution

ADP Enrichment

CVE Program Container

Additional References

References