CVE-2019-7288: Apple iPhone OS

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

The issue was addressed with improved validation on the FaceTime server. This issue is fixed in macOS Mojave 10.14.3 Supplemental Update, iOS 12.1.4. A thorough security audit of the FaceTime service uncovered an issue with Live Photos .

Affected products

• Apple iPhone OS: before 12.1.4 (fixed in 12.1.4)
• Apple Mac OS X: before 10.14.3 (fixed in 10.14.3)

Published 2020-10-27. Last modified 2026-06-17.