Apple watchOS Multiple Security Vulnerabilities

Bugtraq ID:	109340
Class:	Unknown
CVE:	CVE-2019-8624 CVE-2019-8659
Remote:	Yes
Local:	No
Published:	Jul 22 2019 12:00AM
Updated:	Jul 22 2019 12:00AM
Credit:	Natalie Silvanovich of Google Project Zero and Ryan Kontos (@ryanjkontos), Will Christensen of University of Oregon
Vulnerable:	Apple watchOS 10.1.1 Apple watchOS 5.2.1 Apple watchOS 5.1.3 Apple watchOS 5.1.2 Apple watchOS 4.3.2 Apple watchOS 4.3.1 Apple watchOS 3.1.3 Apple watchOS 3.1.1 Apple watchOS 2.2.2 Apple watchOS 2.2.1 Apple watchOS 2.0.1 Apple watchOS 1.0.1 Apple watchOS 5 Apple watchOS 4.3 Apple watchOS 4.2.3 Apple watchOS 4.2.2 Apple watchOS 4.2 Apple watchOS 4.1 Apple watchOS 4 Apple watchOS 3.2.3 Apple watchOS 3.2.2 Apple watchOS 3.2.1 Apple watchOS 3.2 Apple watchOS 3.1 Apple watchOS 3.0 Apple watchOS 3 Apple watchOS 2.2 Apple watchOS 2.1 Apple watchOS 2.0 Apple watchOS 12.4 Apple watchOS 1.0
Not Vulnerable:	Apple watchOS 5.3

Apple watchOS Multiple Security Vulnerabilities

Apple watchOS is prone to the following security vulnerabilities:

1. An information-disclosure vulnerability.
2. An security-bypass vulnerability.

Attackers can exploit these issues to obtain sensitive information, bypass security restrictions and perform unauthorized actions.

Apple watchOS Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple watchOS Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple watchOS Multiple Security Vulnerabilities

References:

• Apple Home Page (Apple)
  
• Apple watchOS Homepage (Apple)
  
• APPLE-SA-2019-7-22-4 watchOS 5.3 (Apple)