Use After Free Vulnerability in AirPort Base Station Firmware by Apple
CVE-2019-8578

9.8CRITICAL

Key Information:

Vendor
Apple
Status
Airport Base Station Firmware Update
Vendor
CVE Published:
27 October 2020

Summary

A use after free issue has been identified in the AirPort Base Station Firmware that could allow a remote attacker to execute arbitrary code. This vulnerability is addressed through enhanced memory management in the firmware updates released by Apple. Users are advised to promptly update to the latest firmware versions to mitigate potential security risks and ensure their devices remain secure.

Affected Version(s)

AirPort Base Station Firmware Update < 7.9

AirPort Base Station Firmware Update < 7.8

References

https://support.apple.com/en-us/HT210090
x_refsource_MISC
https://support.apple.com/en-us/HT210091
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.