CVE-2019-8767

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A memory consumption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Processing a maliciously crafted string may lead to heap corruption.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Oct 27, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-87685.3"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOCVE-2019-87694.3An issue existed in the drawing of web page elements. The issue was addressed with improved logic. This issue is fixed in iOS 13.1 and iPadOCVE-2019-87705.5The issue was addressed with improved permissions logic. This issue is fixed in macOS Catalina 10.15. A malicious application may be able toCVE-2019-87716.1This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in Safari 13.0.1, iOS 13. Maliciously crafted web conCVE-2019-87727.5An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt. This issue is fixed iCVE-2019-87738.8Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in Safari 13.0.1, iOS 13.1 and iPadOS 13CVE-2019-87745.5A resource exhaustion issue was addressed with improved input validation. This issue is fixed in iOS 13.1 and iPadOS 13.1, macOS Catalina 10CVE-2019-87752.4The issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 13.1 and iPadOS 13.1. A person with phCVE-2019-87767.8A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15. An application may be abCVE-2019-87772.4A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fiCVE-2019-877910.0A logic issue applied the incorrect restrictions. This issue was addressed by updating the logic to apply the correct restrictions. This issCVE-2019-87805.5The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.1 and iPadOS 13.1, tvOS 13. A malicious application m