CVE-2019-8605
CVE-2019-8605
In short
A program continues using memory after it has been freed, allowing a malicious app to run unauthorized code with system-level access. This happens because the system doesn't properly manage memory cleanup.
Technical detail
Use-after-free vulnerability in memory management allows a malicious application to execute arbitrary code with elevated system privileges. The vulnerability exists when freed memory is accessed without proper validation; exploitation requires local code execution capability on the affected system.
Summary generated and translated by AI from the official description.
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
public PoCs found — 3
githubgithub.com/1nteger-c/CVE-2019-8605★ 0exploitdbwww.exploit-db.com/exploits/47409unverifiedexploitdbwww.exploit-db.com/exploits/46892unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →