MediumVulnerability
CVE-2019-8760: Face ID authentication bypass via a 3D model of the enrolled user
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2019-8760
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.3%
Summary
CVE-2019-8760 affects Apple's Face ID authentication. A 3D model built to resemble the enrolled user can authenticate through Face ID. The source attributes the issue to Apple Inc. and classifies it as CWE-287, Improper Authentication.
Mitigation
Fixed in iOS 13. The source states that the issue was addressed by improving Face ID machine learning models.
Related items
- InfoAnchored Rank-Adversarial Fine-Tuning Pretrained Visual Place Recognition ModelsSimilar attack · Arxiv (cs.RO + cs.CV security)
- InfoSay the Same, Act Differently: Diagnosing and Steering Text-Action Divergence in Reasoning VLAsSimilar attack · Arxiv (cs.RO + cs.CV security)
- InfoDetect, Repair and Audit: A Hierarchical Multi-Agent Defense Against Adversarial Attacks in Energy ForecastingSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoSANAI: Secure ECC Distributed Keyed Parity Embedded in Weights for Protecting Neural Networks against Bit-Flip AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoTowards Fine-grained and Robust Detection of Human-AI Co-authorshipSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)