Medium severity6.5NVD Advisory· Published Dec 18, 2019· Updated Jun 17, 2026

CVE-2019-8607

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may result in the disclosure of process memory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./iCloud2 versions
cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*range: <7.12
- (no CPE)range: <=7.12
Apple Inc./iTunes2 versions
cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*range: <12.9.5
- (no CPE)range: <=12.9.5
Apple Inc./Safari3 versions
cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <12.1.1
- (no CPE)range: <=12.1.1
- (no CPE)range: unspecified
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <12.3
Apple Inc./Mac OS X
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Range: <10.14.5
Apple Inc./tvOS3 versions
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <12.3
- (no CPE)range: <=12.3
- (no CPE)range: unspecified
Apple Inc./watchOS3 versions
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*range: <5.2.1
- (no CPE)range: <=5.2.1
- (no CPE)range: unspecified
Apple Inc./macOSllm-fuzzy2 versions
<=10.14.5+ 1 more
- (no CPE)range: <=10.14.5
- (no CPE)range: unspecified
Apple Inc./iOSllm-fuzzy2 versions
<=12.3+ 1 more
- (no CPE)range: <=12.3
- (no CPE)range: unspecified
osv-coords23 versions
pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/webkit2gtk3&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/webkit2gtk3&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%204 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Enterprise%20Storage%205 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2012%20SP4 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%207 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/suse/webkit2gtk3&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208
< 2.24.2-lp151.2.3.1+ 22 more
- (no CPE)range: < 2.24.2-lp151.2.3.1
- (no CPE)range: < 2.24.2-lp151.2.3.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.4-3.31.1
- (no CPE)range: < 2.24.4-3.31.1
- (no CPE)range: < 2.24.4-3.31.1
- (no CPE)range: < 2.24.4-3.31.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.2-2.44.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
- (no CPE)range: < 2.24.4-2.47.1
Apple Inc./iCloud for Windowscpe-rescue
Range: unspecified
Apple Inc./iTunes for Windowscpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

support.apple.com/HT210118nvdVendor Advisory
support.apple.com/HT210119nvdVendor Advisory
support.apple.com/HT210120nvdVendor Advisory
support.apple.com/HT210122nvdVendor Advisory
support.apple.com/HT210123nvdVendor Advisory
support.apple.com/HT210124nvdVendor Advisory
support.apple.com/HT210125nvdVendor Advisory
support.apple.com/HT210212nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000