CVE-2019-8722

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Dec 18, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-87238.8Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. CompiliCVE-2019-87248.8Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. CompiliCVE-2019-87255.3The issue was addressed with improved handling of service worker lifetime. This issue is fixed in Safari 13.0.1. Service workers may leak prCVE-2019-87268.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, CVE-2019-87274.3A logic issue was addressed with improved state management. This issue is fixed in iOS 13. Visiting a malicious website may lead to address CVE-2019-87288.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloCVE-2019-87303.3The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed CVE-2019-87315.5A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validatioCVE-2019-87322.4The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.CVE-2019-87338.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, CVE-2019-87348.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloCVE-2019-87358.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1,
CVE-2019-8722: High severity, CVSS 8.8 | Vulnix