VULNERABILITY INTELLIGENCE

CVE-2019-7287

CVSS score7.8 HIGH

EPSS probability4.58%

CISA KEVKnown exploited vulnerability

Published2019-12-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Apple iOS Memory Corruption Vulnerability

Vendor / product: Apple / iOS

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.

Weakness classification

CWE-787: Out-of-bounds Write

Primary references

product-security@apple.com — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource