### [CVE-2019-6238](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6238)
![](https://img.shields.io/static/v1?label=Product&message=macOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2010.14%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Processing%20a%20maliciously%20crafted%20package%20may%20lead%20to%20arbitrary%20code%20execution&color=brighgreen)

### Description

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. Processing a maliciously crafted package may lead to arbitrary code execution.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/fardeen-ahmed/Bug-bounty-Writeups
- https://github.com/houjingyi233/macOS-iOS-system-security