About the security content of iOS 13.3 and iPadOS 13.3 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2019-15903Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP: Out-of-bounds Read
• CVE-2019-15165sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory
• CVE-2019-15161This may open up an attack vector involving extra data at the end of a request
• CVE-2019-15163rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails
• CVE-2019-15164rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source
• CVE-2019-15162rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames
• CVE-2019-8898An information disclosure issue existed in the handling of the Storage Access API
• CVE-2019-8856An API issue existed in the handling of outgoing phone calls initiated with Siri
• CVE-2019-8833A memory corruption issue was addressed by removing the vulnerable code
• CVE-2019-8846A use after free issue was addressed with improved memory management
• CVE-2019-8857The issue was addressed with improved validation when an iCloud Link is created
• CVE-2019-8848This issue was addressed with improved checks
• CVE-2019-8828A memory corruption issue was addressed with improved memory handling
• CVE-2019-8844Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8835Multiple memory corruption issues were addressed with improved memory handling
• CVE-2019-8841An information disclosure issue was addressed by removing the vulnerable code
• CVE-2019-8834An attacker in a privileged network position may be able to bypass HSTS for a limited number of specific top-level domains previously not in the HSTS preload list
• CVE-2019-8838A memory corruption issue was addressed with improved memory handling
• CVE-2019-8832A memory corruption issue was addressed with improved memory handling
• CVE-2019-8830An out-of-bounds read was addressed with improved input validation

Source and provenance

Original title: About the security content of iOS 13.3 and iPadOS 13.3 - Apple Support. Captured 16 Oct 2026, 15:22 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.