CVE-2019-8728: High severity tvos vulnerability

Q: What is the severity of CVE-2019-8728?

The severity of CVE-2019-8728 is high with a CVSS score of 8.8.

Q: Which software are affected by CVE-2019-8728?

CVE-2019-8728 affects iOS 13, iCloud for Windows 7.14 to 10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows.

Q: Is CVE-2019-8728 fixed?

Yes, this issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows.

Q: How do I find more information about CVE-2019-8728?

You can find more information about CVE-2019-8728 on the Apple support website.

Published Sep 19, 2019

Updated

WebKit. Multiple memory corruption issues were addressed with improved memory handling.

Other sources

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, Safari 13, tvOS 13, watchOS 6, iTunes 12.10.1 for Windows. Processing maliciously crafted web content may lead to arbitrary code execution.

Credit

an anonymous researcher(Trend Micro), cc(Trend Micro Zero Day Initiative), found by OSS-Fuzz, Jihui Lu(Tencent KeenLab), Junho Jang(LINE Security Team), Hanul Choi(ABLY Corporation), Sergei Glazunov(Google Project Zero), G. Geshev(Trend Micro Zero Day Initiative), zhunki(Codesafe Team of Legendsec at Qi), Dongzhuo Zhao(ADLab of Venustech), Samuel Groß(Google Project Zero)

Affected Software

14 affected componentsFixes available

Apple tvOS<13

Apple WatchOS<6

Apple iCloud for Windows<7.14

7.14

Apple iCloud for Windows<10.7

10.7

Apple iTunes for Windows<12.10.1

12.10.1

Apple Safari<13

Apple iOS<13

Apple Icloud Windows<7.14

Apple Icloud Windows>=10.0<10.7

Apple Itunes Windows<12.10.1

Apple Safari<13

Apple iPhone OS<13.0

Apple tvOS<13

Apple WatchOS<6.0

Event History

Oct 27, 2020

CVE Published

via MITRE·07:45 PM

Data Sourced

via MITRE·07:45 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

What is the severity of CVE-2019-8728?

The severity of CVE-2019-8728 is high with a CVSS score of 8.8.

Which software are affected by CVE-2019-8728?

CVE-2019-8728 affects iOS 13, iCloud for Windows 7.14 to 10.7, Safari 13, tvOS 13, watchOS 6, and iTunes 12.10.1 for Windows.

What is the potential impact of CVE-2019-8728?

Processing maliciously crafted web content may lead to arbitrary code execution.

Is CVE-2019-8728 fixed?