CVE-2019-8554: Medium severity apple ios and ipados vulnerability

Q: What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2019-8554.

Q: What is the severity of CVE-2019-8554?

The severity of CVE-2019-8554 is medium with a CVSS score of 6.5.

Q: What is the affected software?

The affected software is Apple iOS up to version 12.2 and Apple iPhone OS up to version 12.2.

Q: What is the risk of this vulnerability?

The vulnerability allows a website to access sensor information without user consent, posing a risk to user privacy.

Q: How can I fix CVE-2019-8554?

To fix CVE-2019-8554, update your Apple device to iOS 12.2 or later.

Published Mar 25, 2019

Updated

Safari. A permissions issue existed in the handling of motion and orientation data. This issue was addressed with improved restrictions.

Other sources

A permissions issue existed in the handling of motion and orientation data. This issue was addressed with improved restrictions. This issue is fixed in iOS 12.2. A website may be able to access sensor information without user consent.

Credit

an anonymous researcher

Affected Software

2 affected componentsFixes available

Apple iOS and iPadOS<12.2

12.2

iPhone OS<12.2

Event History

Dec 18, 2019

CVE Published

via MITRE·05:33 PM

Data Sourced

via MITRE·05:33 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

HT209599

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2019-8554.

What is the severity of CVE-2019-8554?