CVE-2019-25071

A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been disclosed to the public. The existence and implications of this vulnerability are doubted by Apple even though multiple public videos demonstrating the attack exist. Upgrading to version 13.0 migt be able to address this issue. It is recommended to upgrade affected devices. NOTE: Apple claims, that after examining the report they do not see any actual security implications.

• CWE-269

• https://vuldb.com/?id.143125
• https://www.scip.ch/en/?labs.20191010
• https://youtu.be/AeuGjMbAirU
• https://vuldb.com/?id.143125
• https://www.scip.ch/en/?labs.20191010
• https://youtu.be/AeuGjMbAirU

Published

Jun 25, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25066A vulnerability has been found in ajenti 2.1.31 and classifi…8.8
• CVE-2019-25067A vulnerability, which was classified as critical, was found…8.8
• CVE-2019-25068A vulnerability classified as critical was found in Axios It…8.8
• CVE-2019-25069A vulnerability, which was classified as problematic, has be…7.5
• CVE-2019-2507Vulnerability in the MySQL Server component of Oracle MySQL …
• CVE-2019-25070** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…6.1
• CVE-2019-25072Due to support of Gzip compression in request bodies, as wel…7.5
• CVE-2019-25073Improper path sanitization in github.com/goadesign/goa befor…7.5
• CVE-2019-25075HTML injection combined with path traversal in the Email ser…6.1
• CVE-2019-25076The TSS (Tuple Space Search) algorithm in Open vSwitch 2.x t…5.8
• CVE-2019-25078A vulnerability classified as problematic was found in pacpa…7.8
• CVE-2019-25079Rejected reason: This candidate is unused by its CNA.