# CVE-2019-8577: iTunes: An input validation issue was addressed with improved memory handling.

CVE-2019-8577 is fixed in iTunes on 1 platform by iTunes 12.11.4.15 (version 12.11.4.15), released August 4, 2021. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2019-8577
- Priority: High
- CVSS: 7.8
- EPSS: 0.1026
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 18, 2019
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2019-8577

## Description

An input validation issue was addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. An application may be able to gain elevated privileges.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | iTunes | 12.11.4.15 | [iTunes 12.11.4.15](https://patchblox.com/security/data/fix/windows-app/apple.itunes-12.11.4.15.md) | Aug 4, 2021 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo