iOS 12.4 Security Update: Fixes for Core Data, WebKit, and FaceTime CVEs

Critical Vulnerability Information iOS 12.4 Update Details - Purpose: Fix multiple security vulnerabilities - Release Date: July 22, 2019 Primary Security Vulnerabilities Fixed - Core Data - CVE-2019-8646: Memory validation improvements to prevent remote attackers from leaking memory (reported by Natalie Silvanovich) - Core Data - CVE-2019-8647: Memory management optimization to prevent remote attackers from executing arbitrary code (reported by Samuel Groß and Natalie Silvanovich) - Core Data - CVE-2019-8660: Enhanced input validation to prevent unintended app termination or arbitrary code execution (reported by Samuel Groß and Natalie Silvanovich) - FaceTime - CVE-2019-8648: Improved input validation to prevent remote attackers from executing arbitrary code (reported by Tao Huang and Tielei Wang) - Foundation - CVE-2019-8641: Input validation improvements to prevent remote attackers from leaking memory (reported by Samuel Groß and Natalie Silvanovich) - Heimdal - CVE-2018-16860: Samba service communication optimization to prevent unauthorized operations (reported by Isaac Boukris and Andrew Bartlett) - libxslt - CVE-2019-13118: Enhanced input validation to prevent remote attackers from viewing sensitive information (discovered by OSS-Fuzz) - Messages - CVE-2019-8665: Validation improvements to fix denial-of-service issues (reported by Michael Hernandez) - Profiles - CVE-2019-8698: Process authorization validation optimization to prevent apps from restricting website access (reported by Luke Deshotels, Jordan Beichler, William Enck, etc.) - Quick Look - CVE-2019-8662: NSDictionary validation improvements to prevent unintended app termination (reported by Natalie Silvanovich and Samuel Groß) - Siri - CVE-2019-8646: Input validation improvements to prevent remote attackers from leaking memory (reported by Natalie Silvanovich) - Telephony - CVE-2019-8699: Logic fix to prevent simultaneous walkie-talkie connections (reported by Marius Alexandru Boeru and anonymous researcher) - UIFoundation - CVE-2019-8657: Enhanced input validation to prevent malicious documents from causing unintended termination or code execution (reported by riusksk) - Wallet - CVE-2019-8682: UI handling optimization to prevent unintended in-app purchases (reported by Jeff Braswell) - WebKit - CVE-2019-8658: State management optimization to prevent malicious content from causing universal cross-site scripting attacks (reported by Sergei Glazunov) - CVE-2019-8644: Memory handling improvements to prevent code execution (reported by G. Geshev) - Multiple CVEs address different memory-related issues Supported Devices - iPhone 5s and later models, iPad Air and later models, iPod touch (6th generation) and later models

Goal Reached Thanks to every supporter — we hit 100%!

iOS 12.4 Security Update: Fixes for Core Data, WebKit, and FaceTime CVEs

More from this source