CVE-2019-6221

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, iTunes 12.9.3 for Windows. A malicious application may be able to elevate privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
AppleiOS>= unspecified, < iOS 12.1.3
ApplemacOS>= unspecified, < macOS Mojave 10.14.3
AppleiTunes for Windows>= unspecified, < iTunes 12.9.3 for Windows

References

Timeline

Published
Mar 5, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-62224.3A consistency issue was addressed with improved state handling. This issue is fixed in iOS 12.2. A website may be able to access the microphCVE-2019-62237.5A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed iCVE-2019-62248.8A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, wCVE-2019-62257.8A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A maCVE-2019-62268.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.CVE-2019-62278.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, SafariCVE-2019-62286.1A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue is fixed in iOS 12.1.3, SaCVE-2019-62296.1A logic issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for WindoCVE-2019-62308.6A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.CVE-2019-62315.5An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watCVE-2019-62327.5A race condition existed during the installation of iTunes for Windows. This was addressed with improved state handling. This issue is fixedCVE-2019-62338.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes
CVE-2019-6221: High severity, CVSS 7.8 | Vulnix