CVE-2019-7287

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute...

Basic Information

CVE State: PUBLISHED
Reserved Date: January 31, 2019
Published Date: December 18, 2019
Last Updated: January 29, 2025
Vendor: Apple
Product: iOS
Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.
Tags

CVSS Scores

CVSS v3.1

7.8 - HIGH

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2022-05-23 00:00:00 UTC) Source

References

https://support.apple.com/HT209520

Known Exploited Vulnerability Information

Source	Added Date
CISA	2022-05-23 00:00:00 UTC

Timeline

CVE ID Reserved

January 31, 2019
CVE Published to Public

December 18, 2019
Added to KEVIntel

May 23, 2022