Junglewise Threat Intelligence

CVE-2019-7287: Apple iOS Memory Corruption Vulnerability

CVE-2019-7287 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2022-05-23

Technologies: Cisco IOS, Apple macOS, Apple watchOS, Apple iPadOS. Vendors: Cisco, Apple.

Executive brief

A memory corruption vulnerability in Apple iOS exists due to improper input validation. An application may exploit this to execute arbitrary code with kernel privileges. This vulnerability has been observed being exploited in the wild.

Affected products

  • Apple iOS up to (excluding) 12.1.4

Timeline

  • 2019-12-18: disclosed: NVD Published Date
  • 2019-02-07: patched: Fixed in iOS 12.1.4
  • 2022-05-23: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2022-05-23: advisory: CISA advisory publication date

Related threats