CVE-2019-8731

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A permissions issue existed in which execute permission was incorrectly granted. This issue was addressed with improved permission validation. This issue is fixed in iOS 13. Processing a maliciously crafted file may disclose user information.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-276

Affected software

VendorProductVersions
AppleiOS>= unspecified, < iOS 13

References

Timeline

Published
Dec 18, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-87322.4The issue was addressed with improved data deletion. This issue is fixed in iOS 13. Deleted calls remained visible on the device.CVE-2019-87338.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, CVE-2019-87348.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13, iCloud for Windows 7.14, iCloCVE-2019-87358.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, CVE-2019-87366.5An input validation issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-CVE-2019-87376.5A denial of service issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, aCVE-2019-87387.8A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted CVE-2019-87397.8A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted CVE-2019-87407.8A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. CVE-2019-87417.5A denial of service issue was addressed with improved input validation.CVE-2019-87422.4The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to aCVE-2019-87438.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously c
CVE-2019-8731: Medium severity, CVSS 5.5 | Vulnix