CVE-2019-8693

Vulnerability

A validation issue exists in the AppleGraphicsControl component of macOS Mojave versions prior to 10.14.6. The flaw allows an application to read restricted memory due to insufficient input sanitization. The issue is present in macOS Mojave 10.14.5 and earlier versions [1].

Exploitation

An attacker would need to have an application running on the affected system. No additional privileges or user interaction beyond launching the malicious or compromised application are required. The application can exploit the validation flaw to access memory that should be restricted [1].

Impact

Successful exploitation results in the disclosure of restricted memory contents, potentially exposing sensitive information such as kernel data or other protected resources. The impact is limited to information disclosure; no code execution or privilege escalation is indicated in the available references [1].

Mitigation

Apple addressed this issue in macOS Mojave 10.14.6, released on July 22, 2019. Users should update to this version or later. No workarounds are documented, and the vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog [1].