CVE-2019-6220: Input Validation
QuartzCore. An out-of-bounds read was addressed with improved input validation.
Other sources
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Mojave 10.14.3. An application may be able to read restricted memory.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2019-6235
- CVE-2019-6200
- CVE-2019-6202
- CVE-2019-6221
- CVE-2019-6231
- CVE-2019-6230
- CVE-2019-6224
- CVE-2018-4467
- CVE-2018-4452
- CVE-2019-6214
- CVE-2019-6225
- CVE-2019-6210
- CVE-2019-6205
- CVE-2019-6213
- CVE-2019-6209
- CVE-2019-6208
- CVE-2019-6218
- CVE-2019-6219
- CVE-2019-6220
- CVE-2018-20346
- CVE-2018-20505
- CVE-2018-20506
- CVE-2019-6211
Frequently Asked Questions
What is CVE-2019-6220?
CVE-2019-6220 is a vulnerability in QuartzCore in Apple macOS Mojave and earlier versions that allows an application to read restricted memory due to an out-of-bounds read vulnerability.
What is the severity of CVE-2019-6220?
The severity of CVE-2019-6220 is medium, with a severity value of 5.5.
How does CVE-2019-6220 affect macOS Mojave?
CVE-2019-6220 affects macOS Mojave versions up to but not including 10.14.3, allowing an application to read restricted memory.
How can I fix CVE-2019-6220 in macOS Mojave?
To fix CVE-2019-6220 in macOS Mojave, update to version 10.14.3 or later.
Where can I find more information about CVE-2019-6220?
You can find more information about CVE-2019-6220 in the following references: [Apple Support](https://support.apple.com/en-us/HT209446), [SecurityFocus](http://www.securityfocus.com/bid/106693), and [Apple HT209446](https://support.apple.com/HT209446).