| Month | Quarter | Year |
|---|---|---|
| #2 | #5 | #4 |
| CVE-ID | CWE-ID | Type | Score |
|---|---|---|---|
| CVE-2019-9816 | CWE-704 | Incorrect Type Conversion or Cast | 5.9 |
|
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups.
Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.
|
|||
| CVE-2019-9792 | CWE-119 | Buffer Errors | 9.8 |
|
The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic value to the running script during a bailout. This magic value can then be used by JavaScript to achieve memory corruption, which results in a potentially exploitable crash.
|
|||
| CVE-2019-9791 | CWE-20 | Input Validation | 9.8 |
|
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the constructor function is entered through on-stack replacement (OSR). This allows for possible arbitrary reading and writing of objects during an exploitable crash.
|
|||
| CVE-2019-6225 | CWE-119 | Buffer Errors | 7.8 |
|
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges.
|
|||
| CVE-2019-6224 | CWE-119 | Buffer Errors | 8.8 |
|
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.
|
|||
| CVE-2019-6218 | CWE-119 | Buffer Errors | 7.8 |
|
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to execute arbitrary code with kernel privileges.
|
|||
| CVE-2019-6215 | CWE-704 | Incorrect Type Conversion or Cast | 8.8 |
|
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
|
|||
| CVE-2019-6214 | CWE-704 | Incorrect Type Conversion or Cast | 8.6 |
|
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to break out of its sandbox.
|
|||
| CVE-2019-6213 | CWE-119 | Buffer Errors | 7.8 |
|
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. An application may be able to execute arbitrary code with kernel privileges.
|
|||
| CVE-2019-6209 | CWE-125 | Out-of-bounds Read | 5.5 |
|
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.
|
|||