CVE-2019-8745

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing a maliciously crafted text file may lead to arbitrary code execution.

Score

CVSS 3.1 8.8 High

Status

Modified - product-security@apple.com

Published

2019-12-18

Last modified

2024-08-04

Weaknesses

CWE-119

Affected products

• Icloud (Apple)
• Icloud For Windows (Apple)
• Icloud For Windows Legacy (Apple)
• Itunes (Apple)
• Itunes For Windows (Apple)
• Mac Os X (Apple)
• Macos (Apple)
• Tvos (Apple)

References

• https://support.apple.com/HT210634
• https://support.apple.com/HT210635
• https://support.apple.com/HT210636
• https://support.apple.com/HT210637
• https://support.apple.com/kb/HT210722