CVE-2019-6225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious...
- Published
- Mar 5, 2019
- Updated
- Aug 4, 2024
- Assigning CNA
- apple
- Evidence observed
- Jan 25, 2019
Primary CVSS
nvd · CVSS 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HModerate · next 30 days
- Percentile
- 98.1%
- Model date
- Oct 16, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges.
Sources
- CVE-2019-6225-macOSExploit
Local privilege escalation exploit for macOS 10.14.2 and earlier, leveraging CVE-2019-6225. Includes kernel exploit code with SMAP limitations and crash warnings.
- OsirisJailbreak12Exploit
iOS 12.0 -> 12.1.2 Incomplete Osiris Jailbreak with CVE-2019-6225 by GeoSn0w (FCE365)
- jailbreak-iOS12Exploit
OS 12.0 & 12.1.2 - Jailbreak with CVE-2019-6225
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.