CVE-2019-8724

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.

Score

CVSS 3.1 8.8 High

Status

Modified - product-security@apple.com

Published

2019-12-18

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• Xcode (Apple)

References

• https://support.apple.com/HT210609