PT-2019-19693 · Apple · Iphone 3Gs

Axi0Mx · Publicado 2019-11-22 · Atualizado 2021-07-21 · CVE-2019-9536

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iPhone 3GS

Description The issue concerns the bootrom malloc implementation in Apple iPhone 3GS, which returns a non-NULL pointer when it is unable to allocate memory. An attacker who has physical access to the device can exploit this to install arbitrary firmware.

Recommendations For Apple iPhone 3GS, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2019-9536

Produtos afetados

Iphone 3Gs

Referências · 3

• 🔥 https://github.com/axi0mX/alloc8 · Exploit
• https://github.com/axi0mX/ipwndfu/blob/master/alloc8.py · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-9536 · Nota de Segurança