About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2019-15903Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Out-of-bounds Read
• CVE-2019-13565An issue was discovered in OpenLDAP 2.x before 2.4.48
• CVE-2019-13057An issue was discovered in the server in OpenLDAP before 2.4.48
• CVE-2018-16301The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:read_infile()
• CVE-2018-14465The RSVP parser in tcpdump before 4.9.3 has a buffer over-read in print-rsvp.c:rsvp_obj_print()
• CVE-2018-14461The LDP parser in tcpdump before 4.9.3 has a buffer over-read in print-ldp.c:ldp_tlv_print()
• CVE-2018-14462The ICMP parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp.c:icmp_print()
• CVE-2018-14467The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_MP)
• CVE-2018-14468The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print()
• CVE-2018-14470The Babel parser in tcpdump before 4.9.3 has a buffer over-read in print-babel.c:babel_print_v2()
• CVE-2018-14879The command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file()
• CVE-2018-14881The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_capabilities_print() (BGP_CAPCODE_RESTART)
• CVE-2018-14882The ICMPv6 parser in tcpdump before 4.9.3 has a buffer over-read in print-icmp6.c
• CVE-2018-16228The HNCP parser in tcpdump before 4.9.3 has a buffer over-read in print-hncp.c:print_prefix()
• CVE-2018-16230The BGP parser in tcpdump before 4.9.3 has a buffer over-read in print-bgp.c:bgp_attr_print() (MP_REACH_NLRI)
• CVE-2018-16300The BGP parser in tcpdump before 4.9.3 allows stack consumption in print-bgp.c:bgp_attr_print() because of unlimited recursion
• CVE-2018-16451The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN
• CVE-2018-16452The SMB parser in tcpdump before 4.9.3 has stack exhaustion in smbutil.c:smb_fdata() via recursion
• CVE-2019-15166lmp_print in tcpdump lacks certain boundary checks
• CVE-2019-15167The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 3, a different vulnerability than CVE-2018-14463
• CVE-2012-2668n/a: Exposure of Sensitive Information to an Unauthorized Actor
• CVE-2012-1164n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2013-4449n/a: security vulnerability
• CVE-2015-1545n/a: security vulnerability
• CVE-2017-16808tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c
• CVE-2018-16229The DCCP parser in tcpdump before 4.9.3 has a buffer over-read in print-dccp.c:dccp_print_option()
• CVE-2018-16227The IEEE 802.11 parser in tcpdump before 4.9.3 has a buffer over-read in print-802_11.c for the Mesh Flags subfield
• CVE-2018-14880The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr()
• CVE-2018-14466The Rx parser in tcpdump before 4.9.3 has a buffer over-read in print-rx.c:rx_cache_find() and rx_cache_insert()
• CVE-2018-14463The VRRP parser in tcpdump before 4.9.3 has a buffer over-read in print-vrrp.c:vrrp_print() for VRRP version 2, a different vulnerability than CVE-2019-15167
• CVE-2018-14469The IKEv1 parser in tcpdump before 4.9.3 has a buffer over-read in print-isakmp.c:ikev1_n_print()
• CVE-2018-14464The LMP parser in tcpdump before 4.9.3 has a buffer over-read in print-lmp.c:lmp_print_data_link_subobjs()
• CVE-2018-10103tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2)
• CVE-2018-10105tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2)
• CVE-2019-15126n/a — Time-of-check Time-of-use (TOCTOU) Race Condition
• CVE-2019-8853A validation issue was addressed with improved input sanitization
• CVE-2019-8856An API issue existed in the handling of outgoing phone calls initiated with Siri
• CVE-2019-8847A memory corruption issue was addressed with improved memory handling
• CVE-2019-8833A memory corruption issue was addressed by removing the vulnerable code
• CVE-2019-8848This issue was addressed with improved checks
• CVE-2019-8828A memory corruption issue was addressed with improved memory handling
• CVE-2019-8842A buffer overflow was addressed with improved bounds checking
• CVE-2019-8852A memory corruption issue was addressed with improved memory handling
• CVE-2019-8851A logic issue was addressed with improved state management
• CVE-2019-8834An attacker in a privileged network position may be able to bypass HSTS for a limited number of specific top-level domains previously not in the HSTS preload list
• CVE-2019-8837A logic issue was addressed with improved restrictions
• CVE-2019-8839A buffer overflow was addressed with improved bounds checking
• CVE-2019-8838A memory corruption issue was addressed with improved memory handling
• CVE-2019-8832A memory corruption issue was addressed with improved memory handling
• CVE-2019-8830An out-of-bounds read was addressed with improved input validation

Source and provenance

Original title: About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra - Apple Support. Captured 16 Oct 2026, 15:22 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.