Out-of-bounds write in Apple iOS
Priority MEDIUM 42CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 9 fixed, 2 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.
Summary
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary code execution.
Why it matters now
EPSS 0.02067 81st percentileScored 2026-11-07
Fix Partial iOS (Apple): iOS 13.2 and iPadOS 13.2tvOS (Apple): tvOS 13.2+4 more productsRed Hat: 1 advisoryRed Hat: 9 fixed, 2 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Apple | iOS | before iOS 13.2 and iPadOS 13.2 | iOS 13.2 and iPadOS 13.2 | Patch available | CNA |
| Apple | tvOS | before tvOS 13.2 | tvOS 13.2 | Patch available | CNA |
| Apple | Safari | before Safari 13.0.3 | Safari 13.0.3 | Patch available | CNA |
| Apple | iTunes for Windows | before iTunes for Windows 12.10.2 | iTunes for Windows 12.10.2 | Patch available | CNA |
| Apple | iCloud for Windows | before iCloud for Windows 11.0 | iCloud for Windows 11.0 | Patch available | CNA |
| Apple | iCloud for Windows (Legacy) | before iCloud for Windows 7.15 | iCloud for Windows 7.15 | Patch available | CNA |
- iOS VendorApple Affected before iOS 13.2 and iPadOS 13.2 Fixed in iOS 13.2 and iPadOS 13.2 Patch available CNA
- tvOS VendorApple Affected before tvOS 13.2 Fixed in tvOS 13.2 Patch available CNA
- Safari VendorApple Affected before Safari 13.0.3 Fixed in Safari 13.0.3 Patch available CNA
- iTunes for Windows VendorApple Affected before iTunes for Windows 12.10.2 Fixed in iTunes for Windows 12.10.2 Patch available CNA
- iCloud for Windows VendorApple Affected before iCloud for Windows 11.0 Fixed in iCloud for Windows 11.0 Patch available CNA
- iCloud for Windows (Legacy) VendorApple Affected before iCloud for Windows 7.15 Fixed in iCloud for Windows 7.15 Patch available CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:* | before 7.15; 10.0 – 10.4 | Vulnerable | Apple |
| cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:* | before 12.10.2 | Vulnerable | Apple |
| cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* | before 13.0.3 | Vulnerable | Apple |
| cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* | before 13.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* | before 13.2 | Vulnerable | Apple |
| cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* | before 13.2 | Vulnerable | Apple |
- cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:* Versions before 7.15; 10.0 – 10.4 Vulnerable ·Apple
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:* Versions before 12.10.2 Vulnerable ·Apple
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* Versions before 13.0.3 Vulnerable ·Apple
- cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:* Versions before 13.2 Vulnerable ·Apple
- cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* Versions before 13.2 Vulnerable ·Apple
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:* Versions before 13.2 Vulnerable ·Apple
Remediation
- Fix · CNA iOS (Apple) Fixed in iOS 13.2 and iPadOS 13.2
- Fix · CNA tvOS (Apple) Fixed in tvOS 13.2
- Fix · CNA Safari (Apple) Fixed in Safari 13.0.3
- Fix · CNA iTunes for Windows (Apple) Fixed in iTunes for Windows 12.10.2
- Fix · CNA iCloud for Windows (Apple) Fixed in iCloud for Windows 11.0
- Fix · CNA iCloud for Windows (Legacy) (Apple) Fixed in iCloud for Windows 7.15
Red Hat 1 advisory
- RHSA-2020:4035 Released 2020-09-29 · Red Hat rating Moderatewebkitgtk4 security, bug fix, and enhancement update
- Red Hat Enterprise Linux Client (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-jsc-2.28.2-2.el7
- Red Hat Enterprise Linux Client Optional (v. 7) webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-doc-2.28.2-2.el7, webkitgtk4-jsc-devel-2.28.2-2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-jsc-2.28.2-2.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-doc-2.28.2-2.el7, webkitgtk4-jsc-devel-2.28.2-2.el7
- Red Hat Enterprise Linux Server (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-2.28.2-2.el7.ppc, webkitgtk4-devel-2.28.2-2.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-devel-2.28.2-2.el7.ppc, webkitgtk4-doc-2.28.2-2.el7 +2
- Red Hat Enterprise Linux Workstation (v. 7) webkitgtk4-2.28.2-2.el7, webkitgtk4-devel-2.28.2-2.el7, webkitgtk4-jsc-2.28.2-2.el7 +1
- Red Hat Enterprise Linux Workstation Optional (v. 7) webkitgtk4-doc-2.28.2-2.el7
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Apple Safari, iCloud for Windows and 4 more products — GLSA-202003-22
25 records Highest priority Priority MEDIUM 20 MEDIUM, 5 LOW
Other records, highest priority first
- TI-2019-06380 Out-of-bounds write in Apple iOSPriority MEDIUM 50
- TI-2019-06377 Out-of-bounds write in Apple iOSPriority MEDIUM 43
- TI-2019-06375 Out-of-bounds write in Apple iOSPriority MEDIUM 43
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | — |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2020:4035 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2020:4035 |
Timeline
- 2026-10-02 Threatist record created from CVE-2019-8822
- 2026-10-03 Alias added: GHSA-m7cp-cc3g-rq5q
References
More Apple Icloud vulnerabilities
- TI-2019-06084 Type confusion in Apple iOS KEVCVSS 3.1HIGH 8.8
- TI-2020-16987 Type confusion in Apple watchOS KEVCVSS 3.1HIGH 7.8
- TI-2020-07926 Apple iOS: A remote attacker may be able to cause arbitrary code execution CVSS 3.1CRITICAL 9.8
- TI-2018-03187 Memory corruption in Apple WebKit CVSS 3.1HIGH 8.8
- TI-2018-03118 Memory corruption in Apple WebKit CVSS 3.0HIGH 8.8
- TI-2018-03361 Memory corruption in iOS, tvOS, watchOS, Safari, iTunes for Windows, iCloud for Windows CVSS 3.0HIGH 8.8
Sources
- CVE-2019-8822 · CVE Program
- CVE-2019-8822 · NVD
- FIRST EPSS
- GHSA-m7cp-cc3g-rq5q · GitHub Advisory Database · CC BY 4.0
- CVE-2019-8822 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences