CVE-2019-6209: apple ios Out-of-bounds Read
Vulnerability summary
CVE-2019-6209 is a medium (CVSS 5.5) Out-of-bounds Read vulnerability in apple ios. EPSS estimates a 3.69% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 05-03-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A malicious application may be able to determine kernel memory layout.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.69%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.69% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundiOS/macOS 10.13.6 - 'if_ports_used_update_wakeuuid()' 16-byte Uninitialized Kernel Stack Disclosure
Maturity: poc
Weaknesses
CWE · root causeAffected systems
1 vendor · 7 products