Security Advisory

CVE-2019-9536

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-11-22 17:41:08
Last updated 2024-08-04 21:54:44
Assigner certcc
CVSS score 6.1
State PUBLISHED

Description

Apple iPhone 3GS bootrom malloc implementation returns a non-NULL pointer when unable to allocate memory, aka 'alloc8'. An attacker with physical access to the device can install arbitrary firmware.