Skip to content
OpenAdvisories
Unscored CVE-2019-8502 EUVD-2019-17892GHSA-hwp7-c247-x2gq

An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issue is fixed in iOS 1…

Published Dec 18, 2019 · Updated Aug 4, 2024 · Assigned by apple

Vendor: Apple Product: iOS Product: macOS Product: tvOS Product: watchOS Platform: iOS Platform: macOS

Description

An API issue existed in the handling of dictation requests. This issue was addressed with improved validation. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A malicious application may be able to initiate a Dictation request without user authorization.

Affected products

VendorProductAffectedFixed
Apple iOS unspecified – < iOS 12.2 iOS 12.2
Apple macOS unspecified – < macOS Mojave 10.14.4 macOS Mojave 10.14.4
Apple tvOS unspecified – < tvOS 12.2 tvOS 12.2
Apple watchOS unspecified – < watchOS 5.2 watchOS 5.2

References