CVE-2019-6203

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
AppleiOS>= unspecified, < iOS 12.2
ApplemacOS>= unspecified, < macOS Mojave 10.14.4
AppletvOS>= unspecified, < tvOS 12.2

References

Timeline

Published
Apr 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-62046.1A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, Safari 12.1. Enabling the Safari Reader feature on a CVE-2019-62057.8A memory corruption issue was addressed with improved lock state checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.CVE-2019-62069.8An issue existed with autofill resuming after it was canceled. The issue was addressed with improved state management. This issue is fixed iCVE-2019-62075.5An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issCVE-2019-62085.5A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.CVE-2019-62095.5An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issCVE-2019-62107.8A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2CVE-2019-62118.8A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3. Processing CVE-2019-62128.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.CVE-2019-62137.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOSCVE-2019-62148.6A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, waCVE-2019-62158.8A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12
CVE-2019-6203: Critical severity, CVSS 9.8 | Vulnix