PT-2019-19168 · Apple · Xcode

Pan Zhenpeng · Published 2019-12-18 · Updated 2019-12-23 · CVE-2019-8722

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 11.0

Description The issue arises from multiple problems in ld64 within the Xcode toolchains, which could lead to arbitrary code execution with user privileges if code is compiled without proper input validation.

Recommendations For versions prior to 11.0, update to Xcode 11.0 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-8722

Affected Products

Xcode

References · 3

• https://support.apple.com/HT210609 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8722 · Security Note