VDB
CVE-2019-8556
CVE-2019-8556
PUBLISHED
Reported by apple · Published December 18, 2019
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| tvos | apple | tvOS 12.2, 12.2 |
| iphone_os | apple | 12.2 |
| itunes | apple | 12.9.4 |
| icloud | apple | 7.11 |
| iOS | Apple | iOS 12.2 |
| safari | apple | Safari 12.1, 12.1 |
| iCloud for Windows | Apple | iCloud for Windows 7.11 |
| iTunes for Windows | Apple | iTunes 12.9.4 for Windows |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Apple | iOS | unspecified |
| Apple | tvOS | unspecified |
| Apple | Safari | unspecified |
| Apple | iTunes for Windows | unspecified |
| Apple | iCloud for Windows | unspecified |
| Apple | tvOS | * |
| Apple | iOS | * |
| Apple | iCloud for Windows | * |
| Apple | Safari | * |
| Apple | iTunes for Windows | * |
Timeline
- Mar 26, 2019 CVE Published
- Apr 14, 2021 EPSS Score (30 in total, the first dated here)
- Aug 4, 2024 CVE Updated
- Jun 1, 2026 Security Advisory
- Sep 7, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2019-8556
vulnetix vdb fixes CVE-2019-8556Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2019-8556/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart