CVE-2019-8746

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, iOS 13, iCloud for Windows 7.14, iCloud for Windows 10.7, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, watchOS 6, iTunes 12.10.1 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

• CWE-125

• https://support.apple.com/en-us/HT210604Vendor Advisory
• https://support.apple.com/en-us/HT210606Vendor Advisory
• https://support.apple.com/en-us/HT210607Vendor Advisory
• https://support.apple.com/en-us/HT210634Vendor Advisory
• https://support.apple.com/en-us/HT210635Vendor Advisory
• https://support.apple.com/en-us/HT210636Vendor Advisory
• https://support.apple.com/en-us/HT210637Vendor Advisory
• https://support.apple.com/en-us/HT210722Vendor Advisory
• https://support.apple.com/en-us/HT210604Vendor Advisory
• https://support.apple.com/en-us/HT210606Vendor Advisory
• https://support.apple.com/en-us/HT210607Vendor Advisory
• https://support.apple.com/en-us/HT210634Vendor Advisory
• https://support.apple.com/en-us/HT210635Vendor Advisory
• https://support.apple.com/en-us/HT210636Vendor Advisory
• https://support.apple.com/en-us/HT210637Vendor Advisory
• https://support.apple.com/en-us/HT210722Vendor Advisory

Published

Oct 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8740A memory corruption vulnerability was addressed with improve…7.8
• CVE-2019-8741A denial of service issue was addressed with improved input …7.5
• CVE-2019-8742The issue was addressed by restricting options offered on a …2.4
• CVE-2019-8743Multiple memory corruption issues were addressed with improv…8.8
• CVE-2019-8744A memory corruption issue existed in the handling of IPv6 pa…5.5
• CVE-2019-8745A buffer overflow was addressed with improved bounds checkin…8.8
• CVE-2019-8747A memory corruption vulnerability was addressed with improve…7.8
• CVE-2019-8748A memory corruption issue was addressed with improved memory…7.8
• CVE-2019-8749Multiple memory corruption issues were addressed with improv…9.8
• CVE-2019-8750Multiple memory corruption issues were addressed with improv…9.8
• CVE-2019-8751Multiple memory corruption issues were addressed with improv…8.8
• CVE-2019-8752Multiple memory corruption issues were addressed with improv…8.8