Description
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, iOS 13. Playing a malicious audio file may lead to arbitrary code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apple iOS
unspecified to < 12.3affected
Apple macOS
unspecified to < 10.14affected
Apple macOS
unspecified to < 12.3affected
Apple macOS
unspecified to < 5.2affected
Apple macOS
unspecified to < 13affected
Apple macOS
unspecified to < 13affected
Apple macOS
unspecified to < 10.15affected
Apple macOS
unspecified to < 10.15affected
References
- https://support.apple.com/en-us/HT210634 ↗
- https://support.apple.com/en-us/HT210722 ↗
- https://support.apple.com/en-us/HT210119 ↗
- https://support.apple.com/en-us/HT210118 ↗
- https://support.apple.com/en-us/HT210122 ↗
- https://support.apple.com/en-us/HT210120 ↗
- https://support.apple.com/en-us/HT210604 ↗
- https://support.apple.com/en-us/HT210606 ↗