CVE-2019-8577

Description

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges.

Affected products

• Apple / iCloud for Windowsunspecified – iCloud for Windows 7.12
• Apple / iOSunspecified – iOS 12.3
• Apple / iTunes for Windowsunspecified – iTunes for Windows 12.9.5
• Apple / macOSunspecified – macOS Mojave 10.14.5
• Apple / tvOSunspecified – tvOS 12.3
• Apple / watchOSunspecified – watchOS 5.2.1

References

• VENDOR_ADVISORYhttps://support.apple.com/HT210118
• VENDOR_ADVISORYhttps://support.apple.com/HT210119
• VENDOR_ADVISORYhttps://support.apple.com/HT210120
• VENDOR_ADVISORYhttps://support.apple.com/HT210124
• VENDOR_ADVISORYhttps://support.apple.com/HT210125
• VENDOR_ADVISORYhttps://support.apple.com/HT210212
• VENDOR_ADVISORYhttps://support.apple.com/HT210122
• MISChttps://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/