Description (CNA)
This issue was addressed with improved checks. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3. An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apple / iOS | affected unspecified before iOS 12.4 |
| Apple / macOS | affected unspecified before macOS Mojave 10.14.6 |
| Apple / tvOS | affected unspecified before tvOS 12.4 |
| Apple / watchOS | affected unspecified before watchOS 5.3 |
CWE
No CWE identifiers supplied.
References
- https://support.apple.com/HT210353
- https://support.apple.com/HT210346
- https://support.apple.com/HT210348
- https://support.apple.com/HT210351
ADP enrichment
No English description supplied.