PT-2019-19168 · Apple · Xcode

Pan Zhenpeng · Publicado 2019-12-18 · Atualizado 2019-12-23 · CVE-2019-8722

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 11.0

Description The issue arises from multiple problems in ld64 within the Xcode toolchains, which could lead to arbitrary code execution with user privileges if code is compiled without proper input validation.

Recommendations For versions prior to 11.0, update to Xcode 11.0 to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2019-8722

Produtos afetados

Xcode

Referências · 3

• https://support.apple.com/HT210609 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-8722 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-8722 · Nota de Segurança