CVE-2019-7286

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.

Score

CVSS 3.1 7.8 High

Status

Analyzed - product-security@apple.com

Published

2019-12-18

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2022-05-23, action due 2022-06-13: Apply updates per vendor instructions.

Weaknesses

CWE-787

Affected products

• Ios (Apple)
• Iphone Os (Apple)
• Mac Os X (Apple)
• Macos (Apple)

References

• https://support.apple.com/HT209520
• https://support.apple.com/HT209521
• https://support.apple.com/HT209601
• https://support.apple.com/HT209602
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7286