# CVE-2019-8605

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious application may be able to execute arbitrary code with system privileges.

- Page: https://www.vulneraibility.com/cve/CVE-2019-8605
- CVSS: 7.8
- Known exploited: yes, in CISA KEV since 2022-06-27; CISA due date 2022-07-18
- EPSS: 17.61% (percentile 97.2)
- Public exploit code: 2 on Exploit-DB · 1 GitHub proof of concept (first 2019-05-21)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2025-01-29)
- Weakness: CWE-416
- Published: 2019-12-18

## Affected versions

- Apple iOS: affected < iOS 12.3
- Apple macOS: affected < macOS Mojave 10.14.5
- Apple tvOS: affected < tvOS 12.3
- Apple watchOS: affected < watchOS 5.2.1

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://support.apple.com/HT210118
- [other] https://support.apple.com/HT210119
- [other] https://support.apple.com/HT210120
- [other] https://support.apple.com/HT210122
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-8605

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.