Improper Bounds Checking in Xcode 11.3 Leads to Arbitrary Code Execution

CVE-2019-8840 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Xcode 11.3. Compiling with untrusted sources may lead to arbitrary code execution with user privileges.

Learn more about our User Device Pen Test.