CVE-2019-8602

CVE-2019-8602 describes a memory corruption vulnerability, specifically a heap-based buffer overflow (CWE-787), that affected multiple Apple products including iOS, macOS, tvOS, watchOS, iTunes for Windows, and iCloud for Windows. This flaw could allow a malicious application to elevate privileges on an affected system. With a CVSS score of 7.8 (High), it requires user interaction (UI:R) but has low attack complexity (AC:L) and could lead to high confidentiality, integrity, and availability impacts (C:H/I:H/A:H). While not listed on CISA's KEV catalog and lacking public exploit code in Metasploit or ExploitDB, it garnered significant community discussion and media coverage at the time of its disclosure. Apple addressed the issue by removing the vulnerable code in subsequent updates.