{"id":"CVE-2019-8591","aliases":["EUVD-2019-17981","GHSA-3fv9-r273-qjc2"],"status":"published","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.","severity":{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.04442,"percentile":0.91471,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-843"],"published":"2019-12-18T17:33:18Z","modified":"2026-06-17T02:42:12Z","exploits":[{"source":"exploitdb","id":"EDB-46891","title":"Apple macOS \u003c 10.14.5 / iOS \u003c 12.3 XNU - Wild-read due to bad cast in stf_ioctl","type":"dos","platform":"multiple","date":"2019-05-21","verified":true,"url":"https://www.exploit-db.com/exploits/46891"},{"source":"pocgithub","id":"jsherman212/used_sock","title":"jsherman212/used_sock","date":"2020-01-20","url":"https://github.com/jsherman212/used_sock"}],"products":[{"vendor":"apple","product":"ios"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"},{"vendor":"cisco","product":"ios"}],"references":[{"url":"https://support.apple.com/HT210118","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/HT210119","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/HT210120","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/HT210122","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-8591"},{"url":"https://github.com/advisories/GHSA-3fv9-r273-qjc2"}],"sources":{"cve":[{"id":"CVE-2019-8591","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.","status":"published","published":"2019-12-18T17:33:18Z","modified":"2024-08-04T21:24:28.617Z","updated_at":"2026-11-02T14:20:21.703364Z"}],"euvd":[{"id":"EUVD-2019-17981","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.","status":"published","published":"2019-12-18T17:33:18Z","modified":"2024-08-04T21:24:28Z","updated_at":"2026-11-03T03:06:42.084203Z"}],"ghsa":[{"id":"GHSA-3fv9-r273-qjc2","title":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12...","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.","status":"published","published":"2022-05-24T17:04:16Z","modified":"2023-01-29T05:00:46Z","updated_at":"2026-11-02T14:44:39.8002Z"}],"nvd":[{"id":"CVE-2019-8591","description":"A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. An application may be able to cause unexpected system termination or write kernel memory.","status":"published","published":"2019-12-18T18:15:27.707Z","modified":"2026-06-17T02:42:12.883Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":8.8,"vector":"AV:N/AC:M/Au:N/C:N/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-843"],"updated_at":"2026-11-02T14:05:40.856496Z"}]}}
