CVE-2019-6231

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to read restricted memory.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Mar 5, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-62327.5A race condition existed during the installation of iTunes for Windows. This was addressed with improved state handling. This issue is fixedCVE-2019-62338.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunesCVE-2019-62348.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunesCVE-2019-623510.0A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watcCVE-2019-62367.5A race condition existed during the installation of iCloud for Windows. This was addressed with improved state handling. This issue is fixedCVE-2019-62378.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS CVE-2019-62387.8A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed iCVE-2019-62397.8This issue was addressed with improved handling of file metadata. This issue is fixed in macOS Mojave 10.14.4. A malicious application may bCVE-2019-62407.5An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal.CVE-2019-62417.5In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a DeniaCVE-2019-62427.2Kentico v10.0.42 allows Global Administrators to read the cleartext SMTP Password by navigating to the SMTP configuration page. NOTE: the veCVE-2019-62436.1Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).
CVE-2019-6231: Medium severity, CVSS 5.5 | Vulnix