PT-2022-8293 · Apple · Iphone

Marc Ruef · Published 2022-06-25 · Updated 2022-07-08 · CVE-2019-25071

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple iPhone versions up to 12.4.1

Description A critical issue has been found that affects Siri. It is possible to initiate Siri on the same device by playing an audio or video file, which could allow for remote execution of commands. The existence and implications of this issue are disputed by Apple, despite public demonstrations of the attack.

Recommendations For Apple iPhone versions up to 12.4.1, upgrade to version 13.0 to address this issue. As a temporary workaround, consider restricting the use of Siri on affected devices until the issue is resolved.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2019-25071

Affected Products

Iphone

References · 7

• 🔥 https://youtu.be/AeuGjMbAirU · Exploit
• 🔥 https://scip.ch/en/?labs.20191010 · Exploit
• https://osv.dev/vulnerability/CVE-2019-25071 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25071 · Security Note
• https://t.me/cvenotify/32180 · Telegram Post
• https://t.me/cvenotify/32791 · Telegram Post
• https://vuldb.com/?id.143125 · Note