PT-2019-7959 · Apple · Ios

Dan Niemeyer + 1 · Published 2019-01-11 · Updated 2019-01-17 · CVE-2017-13888

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions iOS versions prior to 11.2

Description A type confusion issue was addressed with improved memory handling.

Recommendations For iOS versions prior to 11.2, update to version 11.2 or later to resolve the issue.

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

CVE-2017-13888

Affected Products

Ios

References · 3

• https://support.apple.com/HT208334 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13888 · Security Note
• https://osv.dev/vulnerability/CVE-2017-13888 · Vendor Advisory