CVE-2019-6235

CRITICAL 10.0CVE-2019-6235 · Published 04/03/2019 · updated 17/06/2026

In short

CVE-2019-6235 is a CRITICAL (CVSS 10.0) vulnerability affecting itunes (apple).
Chance of exploitation in the next 30 days (EPSS): 2.1%, higher than 81.7% of all vulnerabilities.
Fix: update to 12.9.3 or later.

Package	Affected versions	Patched versions
itunes apple	`< 12.9.3`	`12.9.3`

Description

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3, iTunes 12.9.3 for Windows. A sandboxed process may be able to circumvent sandbox restrictions.

References

securityfocus.com/bid/106724 · Third Party Advisory
support.apple.com/HT209443 · Vendor Advisory
support.apple.com/HT209446 · Vendor Advisory
support.apple.com/HT209447 · Vendor Advisory
support.apple.com/HT209448 · Vendor Advisory
support.apple.com/HT209450 · Vendor Advisory

More vulnerabilities in itunes

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

itunes

apple

< 12.9.3

12.9.3

More vulnerabilities in itunes

See all →