CVE-2019-8592
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.3%
exploitation probability
1.3%top 31% of all CVEs
observed exploitation
nono source reports it
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, iOS 13. Playing a malicious audio file may lead to arbitrary code execution.
References
https://support.apple.com/en-us/HT210118https://support.apple.com/en-us/HT210119https://support.apple.com/en-us/HT210120https://support.apple.com/en-us/HT210122https://support.apple.com/en-us/HT210604https://support.apple.com/en-us/HT210606https://support.apple.com/en-us/HT210634https://support.apple.com/en-us/HT210722