CVE-2019-8790

This issue was addresses by updating incorrect URLSession file descriptors management logic to match Swift 5.0. This issue is fixed in Swift 5.1.1 for Ubuntu. Incorrect management of file descriptors in URLSession could lead to inadvertent data disclosure.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2020-10-27

Last modified

2024-08-04

Weaknesses

CWE-922

Affected products

• Swift (Apple)
• Swift For Ubuntu (Apple)

References

• https://support.apple.com/en-us/HT210647