CVE-2019-6209: An out-of-bounds read issue existed that led to the disclosure of kernel memory

Description

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

High

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)3.7% · higher than 90% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IO

iOS · Apple

before iOS 12.1.3 · source: vendor, NVD

MA

macOS · Apple

before macOS Mojave 10.14.3 · source: vendor

TV

tvOS · Apple

before tvOS 12.1.2 · source: vendor

WA

watchOS · Apple

before watchOS 5.1.3 · source: vendor, NVD

MO

Mac OS X · Apple

before 10.14.3 · source: NVD

TO

TV OS · Apple

before 12.1.2 · source: NVD