CVE-2019-8662

Summary

This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.

Affected Software

VendorProductVersion RangeStatus
AppleiOSunspecified < iOS 12.4affected
ApplemacOSunspecified < macOS Mojave 10.14.6affected
AppletvOSunspecified < tvOS 12.4affected
ApplewatchOSunspecified < watchOS 5.3affected

Weaknesses

  • An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary

ADP Enrichment

CVE Program Container

Additional References

References