PT-2019-19170 · Apple · Xcode

Pan Zhenpeng · Published 2019-12-18 · Updated 2019-12-22 · CVE-2019-8724

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 11.0

Description The issue arises from multiple problems in ld64 within the Xcode toolchains, which could be exploited to achieve arbitrary code execution with user privileges due to insufficient input validation during code compilation.

Recommendations For versions prior to 11.0, update to Xcode 11.0 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2019-8724

Affected Products

Xcode

References · 3

• https://support.apple.com/HT210609 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8724 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8724 · Vendor Advisory