CVE-2019-7288

The issue was addressed with improved validation on the FaceTime server

published October 27, 2020

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

⚠️ Oops! A security audit revealed a quirk in FaceTime's Live Photos feature. This flaw could let mischief-makers capture those candid moments without your consent! 📸 Think of it like a restaurant waiter accidentally leaving the door to the kitchen ajar — while you’re enjoying your meal, someone could sneak in and snap a picture of the chef’s secrets! If exploited, this could lead to unauthorized access to your Live Photos, allowing others to snatch images without your knowledge. This might not be the worst-case scenario, but it’s definitely an unwelcome invasion of privacy!

Put simply

Think of it like a restaurant waiter accidentally leaving the door to the kitchen ajar — while you’re enjoying your meal, someone could sneak in and snap a picture of the chef’s secrets! The flaw was due to insufficient validation on the FaceTime server regarding the Live Photos feature, potentially enabling unauthorized users to access photos taken during calls.

What to do

If exploited, this could lead to unauthorized access to your Live Photos, allowing others to snatch images without your knowledge. This might not be the worst-case scenario, but it’s definitely an unwelcome invasion of privacy! To secure your device, update to macOS Mojave 10.14.3 or iOS 12.1.4 as soon as possible. Regularly check for updates to ensure you're protected against similar vulnerabilities in the future! You've got this! Keep your devices updated and enjoy your FaceTime calls worry-free! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01383 · 72.0th percentile
Published
2020-10-27T19:23Z
EPSS history
Timeline
  • 27 OCT 19:23Z
    The issue was addressed with improved validation on the FaceTime server
    cvelistv5