CVE-2019-8774

A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10.15. Parsing a maliciously crafted iBooks file may lead to a persistent denial-of-service.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2020-10-27

Last modified

2024-08-04

Weaknesses

CWE-20, CWE-400

Affected products

• Ios And Ipados (Apple)
• Ipad Os (Apple)
• Iphone Os (Apple)
• Mac Os X (Apple)
• Macos (Apple)

References

• https://support.apple.com/en-us/HT210603
• https://support.apple.com/en-us/HT210634