CVE-2019-8738

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted file may lead to arbitrary code execution.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
AppleXcode>= unspecified, < Xcode 11.0

References

Timeline

Published
Dec 18, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-87397.8A memory corruption issue was addressed with improved state management. This issue is fixed in Xcode 11.0. Processing a maliciously crafted CVE-2019-87407.8A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 13.1 and iPadOS 13.1, watchOS 6, tvOS 13. CVE-2019-87417.5A denial of service issue was addressed with improved input validation.CVE-2019-87422.4The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13. A person with physical access to aCVE-2019-87438.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in watchOS 6.1. Processing maliciously cCVE-2019-87445.5A memory corruption issue existed in the handling of IPv6 packets. This issue was addressed with improved memory management. This issue is fCVE-2019-87458.8A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15, tvOS 13, iTunes for Windows 12.1CVE-2019-87469.8An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows CVE-2019-87477.8A memory corruption vulnerability was addressed with improved locking. This issue is fixed in watchOS 6.1. An application may be able to exeCVE-2019-87487.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be abCVE-2019-87499.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloudCVE-2019-87509.8Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in watchOS 6.1, iCloud for Windows 11.0
CVE-2019-8738: High severity, CVSS 7.8 | Vulnix