CVE-2019-8760: Face ID authentication bypass via a 3D model of the enrolled user
Dec 18, 2019MediumVulnerabilitySecurity
CVE-2019-8760
CVE-2019-8760 affects Apple's Face ID authentication. A 3D model built to resemble the enrolled user can authenticate through Face ID. The source attributes the issue to Apple Inc. and classifies it as CWE-287, Improper Authentication.
Fix: Fixed in iOS 13. The source states that the issue was addressed by improving Face ID machine learning models.
NVD/CVE Database