CVE-2019-8724

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Multiple issues in ld64 in the Xcode toolchains were addressed by updating to version ld64-507.4. This issue is fixed in Xcode 11.0. Compiling code without proper input validation could lead to arbitrary code execution with user privilege.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Dec 18, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-87255.3The issue was addressed with improved handling of service worker lifetime. This issue is fixed in Safari 13.0.1. Service workers may leak prCVE-2019-87268.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, CVE-2019-87274.3A logic issue was addressed with improved state management. This issue is fixed in iOS 13. Visiting a malicious website may lead to address CVE-2019-87288.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloCVE-2019-87303.3The contents of locked notes sometimes appeared in search results. This issue was addressed with improved data cleanup. This issue is fixed CVE-2019-87315.5A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validatioCVE-2019-87322.4The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.CVE-2019-87338.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, CVE-2019-87348.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloCVE-2019-87358.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, CVE-2019-87366.5An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-CVE-2019-87376.5A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, a