PT-2019-19197 · Apple · Ios

Wish Wu + 1 · Published 2019-12-18 · Updated 2020-08-24 · CVE-2019-8760

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 13

Description The issue allowed a 3D model constructed to look like the enrolled user to authenticate via Face ID. This was addressed by improving Face ID machine learning models.

Recommendations For iOS versions prior to 13, update to iOS 13 to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-8760

Affected Products

Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-8760 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8760 · Vendor Advisory
• https://support.apple.com/HT210606 · Vendor Advisory