AI Sec Watch: A Security Intelligence Platform for AI Systems

Luu, T.J.

CVE-2019-8760: This issue was addressed by improving Face ID machine learning models. This issue is fixed in iOS 13. A 3D model constru

mediumvulnerability

security

Source: NVD/CVE DatabaseDecember 18, 2019CVE-2019-8760

Summary

CVE-2019-8760 is a vulnerability in Face ID (Apple's facial recognition system) where a 3D model made to look like an enrolled user could trick the system into unlocking a device. The vulnerability is classified as an improper authentication issue (CWE-287, a weakness in how systems verify identity).

Solution / Mitigation

This issue is fixed in iOS 13. The fix was addressed by improving Face ID machine learning models (the AI algorithms that help Face ID recognize faces).