CVE-2019-7287 — VulnIntel

CVE-2019-7287

HIGH

KEV

KISA

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.

설명

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.

Score Summary

CVSS Score: 7.8
Version: 3.1
VPI: 100
Why this VPI (explainable, experimental)
VPI breakdown
Impact 78.00
Exploitation signal(KEV listed) ×1.50
VPI 100.00
VPI formula vpi-v1
EPSS: 4.6%
(상위 90.6%)
Attack Vector: Local Access
Low Complexity
No Privileges
User Interaction Required
Scope Unchanged
High Confidentiality Impact
High Integrity Impact
High Availability Impact

Details

Published: 12/18/2019(7 years ago)
Modified: 10/23/2025(9 months ago)
Source: KEV, NVD, KISA
Products: 1

CISA KEV Listing

Vendor / Project: Apple
Product: iOS

Date Added: 05/23/2022
Due Date: 06/13/2022Overdue 1501d

Required Action

Apply updates per vendor instructions.

Listed in KISA bulletin

This CVE is referenced in a KISA security bulletin (Korean only).

Bulletin ID: 34953
Published: 2019-02-10

boho.or.kr

Vulnerability Lifecycle

KISAKISA Listed02/10/2019
NVDPublished12/18/2019
CISA KEV

Score Comparison by Source

Source	CVSS Version	Base Score	Severity	Vector String	Assessment Date
NVDNIST	3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	04/20/2026
NVDNIST	2.0	9.3

CWE Weakness Classification

CWE-787
NVD
Secondary

References (2)

Affected Products (1)

Impact	78.00
Exploitation signal(KEV listed)	×1.50
VPI	100.00