CVE-2019-8600

CRITICAL 9.8CVE-2019-8600 · Published 18/12/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
icloud apple	`≥ 10.0, ≤ 10.4< 7.12`	`7.12`
itunes apple	`< 12.9.5`	`12.9.5`

Description

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.

References

research.checkpoint.com/2019/select-code_execution-from-using-sqlite
support.apple.com/HT210118 · Vendor Advisory
support.apple.com/HT210119 · Vendor Advisory
support.apple.com/HT210120 · Vendor Advisory
support.apple.com/HT210122 · Vendor Advisory
support.apple.com/HT210124 · Vendor Advisory
support.apple.com/HT210125 · Vendor Advisory
support.apple.com/HT210212 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free