PT-2019-19076 · Apple · Sierra+2

Published 2019-04-29 · Updated 2020-10-29 · CVE-2019-8534

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 for High Sierra and Sierra

Description A logic issue resulted in memory corruption, allowing a malicious application to potentially execute arbitrary code with kernel privileges. This issue was addressed with improved state management.

Recommendations For macOS versions prior to 10.14.4, update to macOS Mojave 10.14.4 or later to resolve the issue. For High Sierra and Sierra, apply Security Update 2019-002 or later to fix the problem.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-8534

ZDI-19-422

Affected Products

High Sierra

Sierra

Apple Macos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-8534 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8534 · Vendor Advisory
• https://support.apple.com/en-us/HT209600 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-19-422 · Security Note