description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra, iOS 13.3 and iPadOS 13.3, iOS 12.4.4, watchOS 5.3.4. Processing malicious video via FaceTime may lead to arbitrary code execution.
problem types: Processing malicious video via FaceTime may lead to arbitrary code execution
affected:
{
product: iOS and iPadOS
vendor: Apple
versions:
lessThan: 13.3, status: affected, version: unspecified, versionType: custom
}
{
product: iOS
vendor: Apple
versions:
lessThan: 12.4, status: affected, version: unspecified, versionType: custom
}
{
product: macOS
vendor: Apple
versions:
lessThan: 10.15, status: affected, version: unspecified, versionType: custom
}
{
product: macOS
vendor: Apple
versions:
lessThan: 6.1, status: affected, version: unspecified, versionType: custom
}
{
product: macOS
vendor: Apple
versions:
lessThan: 13.3, status: affected, version: unspecified, versionType: custom
}
{
product: macOS
vendor: Apple
versions:
lessThan: 5.3, status: affected, version: unspecified, versionType: custom
}
