CVE-2019-25071CWE-269

Apple iOS Siri Self privileges management

Medium · published June 25, 2022

CVSS v3.1
6.3
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

A vulnerability was found in Apple iPhone up to 12.4.1. It has been declared as critical. Affected by this vulnerability is Siri. Playing an audio or video file might be able to initiate Siri on the same device which makes it possible to execute commands remotely. Exploit details have been disclosed to the public. The existence and implications of this vulnerability are doubted by Apple even though multiple public videos demonstrating the attack exist. Upgrading to version 13.0 migt be able to address this issue. It is recommended to upgrade affected devices. NOTE: Apple claims, that after examining the report they do not see any actual security implications.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.01307 · 70.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-06-25T06:10Z
EPSS history
Timeline
  • 25 JUN 06:10Z
    Apple iOS Siri Self privileges management
    cvelistv5