PT-2019-19139 · Apple · Watchos

Ryan Kontos + 2 · Published 2019-12-18 · Updated 2020-08-24 · CVE-2019-8659

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 5.3

Description This issue allows users removed from an iMessage conversation to potentially alter state. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 5.3, update to watchOS 5.3 to resolve the issue.

Fix

Related Identifiers

CVE-2019-8659

Affected Products

Watchos

References · 3

• https://support.apple.com/HT210353 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8659 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8659 · Security Note