Privilege escalation in Apple Ios
CVE-2019-25071
A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to e…
Vulnerability class: Privilege Escalation
EPSS: 0.007 (72.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L.
Affected products
- Apple Ios — versions 12.4.0, 12.4.1
Weakness classification (CWE)
References
- www.scip.ch/en/ (x_refsource_MISC)
- youtu.be/AeuGjMbAirU (x_refsource_MISC)
- vuldb.com/ (x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-25071?
- CVE-2019-25071 is a medium-severity vulnerability in Apple Ios, classified under Improper Privilege Management. CVSS score: 6.3/10. Published 2022-06-25.
- How severe is CVE-2019-25071?
- Medium severity. CVSS v3 base score is 6.3 out of 10.