CVE-2019-8856

An API issue existed in the handling of outgoing phone calls initiated with Siri. This issue was addressed with improved state handling. This issue is fixed in iOS 13.3 and iPadOS 13.3, watchOS 6.1.1, macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. Calls made using Siri may be initiated using the wrong cellular plan on devices with two active plans.

• https://support.apple.com/en-us/HT210785Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT210788Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT210789Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT210785Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT210788Release Notes, Vendor Advisory
• https://support.apple.com/en-us/HT210789Release Notes, Vendor Advisory

Published

Oct 27, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-8850An out-of-bounds read was addressed with improved input vali…5.5
• CVE-2019-8851A logic issue was addressed with improved state management. …7.5
• CVE-2019-8852A memory corruption issue was addressed with improved memory…7.8
• CVE-2019-8853A validation issue was addressed with improved input sanitiz…5.5
• CVE-2019-8854A user privacy issue was addressed by removing the broadcast…7.5
• CVE-2019-8855An access issue was addressed with additional sandbox restri…6.3
• CVE-2019-8857The issue was addressed with improved validation when an iCl…3.3
• CVE-2019-8858A logic issue was addressed with improved state management. …5.3
• CVE-2019-8859Rejected reason: This candidate is unused by its CNA.
• CVE-2019-8860Rejected reason: This candidate is unused by its CNA.
• CVE-2019-8861Rejected reason: This candidate is unused by its CNA.
• CVE-2019-8862Rejected reason: This candidate is unused by its CNA.