CVE-2019-9536

Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware.

Score

CVSS 3.1 6.8 Medium

Status

Modified - cret@cert.org

Published

2019-11-22

Last modified

2024-08-04

Weaknesses

CWE-755

Affected products

• Iphone (Apple)
• Iphone 3gs (Apple)

References

• https://github.com/axi0mX/alloc8
• https://github.com/axi0mX/ipwndfu/blob/master/alloc8.py