CVE-2019-6209: Input Validation
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.
Other sources
Kernel. An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation.
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-6235
- CVE-2019-6231
- CVE-2019-6230
- CVE-2019-6224
- CVE-2019-6214
- CVE-2019-6225
- CVE-2019-6210
- CVE-2019-6205
- CVE-2019-6213
- CVE-2019-6209
- CVE-2019-6208
- CVE-2019-6218
- CVE-2018-20346
- CVE-2018-20505
- CVE-2018-20506
- CVE-2019-6227
- CVE-2019-6233
- CVE-2019-6234
- CVE-2019-6229
- CVE-2019-6215
- CVE-2019-6212
- CVE-2019-6216
- CVE-2019-6217
- CVE-2019-6226
- CVE-2019-8570
- CVE-2019-6200
- CVE-2019-6202
- CVE-2019-6221
- CVE-2018-4467
- CVE-2018-4452
- CVE-2019-6219
- CVE-2019-6220
- CVE-2019-6211
- CVE-2019-6206
- CVE-2019-6228
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2019-6209.
What is the severity of CVE-2019-6209?
The severity of CVE-2019-6209 is medium with a severity value of 5.5.
What is the affected software for CVE-2019-6209?
The affected software for CVE-2019-6209 includes iPhone OS up to version 12.1.3, macOS Mojave up to version 10.14.3, tvOS up to version 12.1.2, and watchOS up to version 5.1.3.
How was CVE-2019-6209 addressed?
CVE-2019-6209 was addressed with improved input validation in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, and watchOS 5.1.3.
What can a malicious application do with CVE-2019-6209?
A malicious application may be able to determine kernel memory layout with CVE-2019-6209.