CVE-2019-8596
iTunes: Multiple memory corruption issues were addressed with improved memory handling.
CVE-2019-8596 is fixed in 115 products on 2 platforms, first by RHSA-2019:3553, released November 5, 2019. It is not reported as exploited. Patch Radar priority: High.
HighFixed on 2 platforms
CVSS
8.8
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0200
80th percentile
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| iTunes | 12.11.4.15 | iTunes 12.11.4.15 | Aug 4, 2021 |
| Linux | |||
| SDL · RHEL 8 | 0:1.2.15-35.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| SDL-devel · RHEL 8 | 0:1.2.15-35.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| accountsservice · RHEL 8 | 0:0.6.50-7.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| accountsservice-devel · RHEL 8 | 0:0.6.50-7.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| accountsservice-libs · RHEL 8 | 0:0.6.50-7.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| appstream-data · RHEL 8 | 0:8-20190805.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| baobab · RHEL 8 | 0:3.28.0-2.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| chrome-gnome-shell · RHEL 8 | 0:10.1-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| evince · RHEL 8 | 0:3.28.4-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| evince-browser-plugin · RHEL 8 | 0:3.28.4-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| evince-libs · RHEL 8 | 0:3.28.4-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| evince-nautilus · RHEL 8 | 0:3.28.4-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| file-roller · RHEL 8 | 0:3.28.1-2.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gdk-pixbuf2 · RHEL 8 | 0:2.36.12-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gdk-pixbuf2-devel · RHEL 8 | 0:2.36.12-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gdk-pixbuf2-modules · RHEL 8 | 0:2.36.12-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gdk-pixbuf2-xlib · RHEL 8 | 0:2.36.12-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gdk-pixbuf2-xlib-devel · RHEL 8 | 0:2.36.12-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gdm · RHEL 8 | 1:3.28.3-22.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gir1.2-javascriptcoregtk-4.0 · Ubuntu 18.04.6 LTS (bionic) | 2.24.1-0ubuntu0.18.04.1 | gir1.2-javascriptcoregtk-4.0 2.24.1-0ubuntu0.18.04.1 | Dec 18, 2019 |
| gir1.2-webkit2-4.0 · Ubuntu 18.04.6 LTS (bionic) | 2.24.1-0ubuntu0.18.04.1 | gir1.2-webkit2-4.0 2.24.1-0ubuntu0.18.04.1 | Dec 18, 2019 |
| gjs · RHEL 8 | 0:1.56.2-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gjs-devel · RHEL 8 | 0:1.56.2-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-classic-session · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-control-center · RHEL 8 | 0:3.28.2-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-control-center-filesystem · RHEL 8 | 0:3.28.2-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-desktop3 · RHEL 8 | 0:3.32.2-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-desktop3-devel · RHEL 8 | 0:3.32.2-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-remote-desktop · RHEL 8 | 0:0.1.6-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-settings-daemon · RHEL 8 | 0:3.32.0-4.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell · RHEL 8 | 0:3.32.2-9.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-apps-menu · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-auto-move-windows · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-common · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-dash-to-dock · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-desktop-icons · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-disable-screenshield · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-drive-menu · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-horizontal-workspaces · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-launch-new-instance · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-native-window-placement · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-no-hot-corner · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-panel-favorites · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-places-menu · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-screenshot-window-sizer · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-systemMonitor · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-top-icons · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-updates-dialog · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-user-theme · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-window-grouper · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-window-list · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-windowsNavigator · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-shell-extension-workspace-indicator · RHEL 8 | 0:3.32.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-software · RHEL 8 | 0:3.30.6-2.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-software-editor · RHEL 8 | 0:3.30.6-2.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gnome-tweaks · RHEL 8 | 0:3.28.1-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gsettings-desktop-schemas · RHEL 8 | 0:3.32.0-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gsettings-desktop-schemas-devel · RHEL 8 | 0:3.32.0-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gtk-update-icon-cache · RHEL 8 | 0:3.22.30-4.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gtk3 · RHEL 8 | 0:3.22.30-4.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gtk3-devel · RHEL 8 | 0:3.22.30-4.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gtk3-immodule-xim · RHEL 8 | 0:3.22.30-4.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-afc · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-afp · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-archive · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-client · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-devel · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-fuse · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-goa · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-gphoto2 · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-mtp · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| gvfs-smb · RHEL 8 | 0:1.36.2-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| libjavascriptcoregtk-4.0-18 · Ubuntu 18.04.6 LTS (bionic) | 2.24.1-0ubuntu0.18.04.1 | libjavascriptcoregtk-4.0-18 2.24.1-0ubuntu0.18.04.1 | Dec 18, 2019 |
| libjavascriptcoregtk-4.0-bin · Ubuntu 18.04.6 LTS (bionic) | 2.24.1-0ubuntu0.18.04.1 | libjavascriptcoregtk-4.0-bin 2.24.1-0ubuntu0.18.04.1 | Dec 18, 2019 |
| libpurple · RHEL 8 | 0:2.13.0-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| libpurple-devel · RHEL 8 | 0:2.13.0-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| libwebkit2gtk-4.0-37 · Ubuntu 18.04.6 LTS (bionic) | 2.24.1-0ubuntu0.18.04.1 | libwebkit2gtk-4.0-37 2.24.1-0ubuntu0.18.04.1 | Dec 18, 2019 |
| libwebkit2gtk-4.0-37-gtk2 · Ubuntu 18.04.6 LTS (bionic) | 2.24.1-0ubuntu0.18.04.1 | libwebkit2gtk-4.0-37-gtk2 2.24.1-0ubuntu0.18.04.1 | Dec 18, 2019 |
| mozjs60 · RHEL 8 | 0:60.9.0-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| mozjs60-devel · RHEL 8 | 0:60.9.0-3.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| mutter · RHEL 8 | 0:3.32.2-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| mutter-devel · RHEL 8 | 0:3.32.2-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| nautilus · RHEL 8 | 0:3.28.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| nautilus-devel · RHEL 8 | 0:3.28.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| nautilus-extensions · RHEL 8 | 0:3.28.1-10.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| pango · RHEL 8 | 0:1.42.4-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| pango-devel · RHEL 8 | 0:1.42.4-6.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| pidgin · RHEL 8 | 0:2.13.0-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| pidgin-devel · RHEL 8 | 0:2.13.0-5.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-core-libs · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-graphics-libs · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-plugin-fade-throbber · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-plugin-label · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-plugin-script · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-plugin-space-flares · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-plugin-throbgress · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-plugin-two-step · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-scripts · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-system-theme · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-theme-charge · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-theme-fade-in · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-theme-script · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-theme-solar · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-theme-spinfinity · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| plymouth-theme-spinner · RHEL 8 | 0:0.9.3-15.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| wayland-protocols-devel · RHEL 8 | 0:1.17-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| webkit2gtk-driver · Ubuntu 18.04.6 LTS (bionic) | 2.24.1-0ubuntu0.18.04.1 | webkit2gtk-driver 2.24.1-0ubuntu0.18.04.1 | Dec 18, 2019 |
| webkit2gtk3 · RHEL 8 | 0:2.24.3-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| webkit2gtk3-devel · RHEL 8 | 0:2.24.3-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| webkit2gtk3-jsc · RHEL 8 | 0:2.24.3-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| webkit2gtk3-jsc-devel · RHEL 8 | 0:2.24.3-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |
| webkit2gtk3-plugin-process-gtk2 · RHEL 8 | 0:2.24.3-1.el8 | RHSA-2019:3553 | Nov 5, 2019 |