CVE-2019-8857: Input Validation
Photos. The issue was addressed with improved validation when an iCloud Link is created.
Other sources
The issue was addressed with improved validation when an iCloud Link is created. This issue is fixed in iOS 13.3 and iPadOS 13.3. Live Photo audio and video data may be shared via iCloud links even if Live Photo is disabled in the Share Sheet carousel.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-8857.
What is the severity of CVE-2019-8857?
The severity of CVE-2019-8857 is low.
How does the issue in CVE-2019-8857 affect iCloud links?
The issue in CVE-2019-8857 allows Live Photo audio and video data to be shared via iCloud links even if Live Photo is disabled in the Share Sheet carousel.
How was the issue in CVE-2019-8857 fixed?
The issue in CVE-2019-8857 was fixed with improved validation when an iCloud Link is created in iOS 13.3 and iPadOS 13.3.
Where can I find more information about CVE-2019-8857?
You can find more information about CVE-2019-8857 on the official Apple support page: https://support.apple.com/en-us/HT210785