CVE-2019-9536

Apple / iPhone PUBLISHED

Description (CNA)

Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware.

Affected (CNA)

Vendor / product	Versions
Apple / iPhone	affected 3GS

CWE

No CWE identifiers supplied.

References

https://github.com/axi0mX/ipwndfu/blob/master/alloc8.py
https://github.com/axi0mX/alloc8

ADP enrichment

CVE

No English description supplied.

https://github.com/axi0mX/ipwndfu/blob/master/alloc8.py
https://github.com/axi0mX/alloc8