CVE-2019-8591 EXPLOIT
7.1
HIGH · CVSS 3.1 · EPSS 4.4% (pctl 91)
Patch early
A public exploit exists.
Description
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.
Scoring
| CVSS | 7.1 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H |
| EPSS | 4.44% — more likely to be exploited than 91% of all CVEs |
| Weakness | CWE-843 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2019-12-18 |
| Last modified | 2026-06-17 |
Affected (4)
| Vendor | Product |
|---|---|
| apple | iphone os |
| apple | mac os x |
| apple | tvos |
| apple | watchos |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Apple macOS < 10.14.5 / iOS < 12.3 XNU - Wild-read due to bad cast in stf_ioctl | 2019-05-21 |
References
→ the Explorer · watch your stack · NVD