An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges.
References
Link | Resource |
---|---|
https://support.apple.com/HT211168 | Vendor Advisory |
https://support.apple.com/HT211170 | Vendor Advisory |
https://support.apple.com/HT211171 | Vendor Advisory |
https://support.apple.com/HT211175 | Vendor Advisory |
https://support.apple.com/HT211168 | Vendor Advisory |
https://support.apple.com/HT211170 | Vendor Advisory |
https://support.apple.com/HT211171 | Vendor Advisory |
https://support.apple.com/HT211175 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 05:41
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.apple.com/HT211168 - Vendor Advisory | |
References | () https://support.apple.com/HT211170 - Vendor Advisory | |
References | () https://support.apple.com/HT211171 - Vendor Advisory | |
References | () https://support.apple.com/HT211175 - Vendor Advisory |
Information
Published : 2020-06-09 17:15
Updated : 2024-11-21 05:41
NVD link : CVE-2020-9852
Mitre link : CVE-2020-9852
CVE.ORG link : CVE-2020-9852
JSON object : View
Products Affected
apple
- iphone_os
- ipados
- mac_os_x
- tvos
- watchos
CWE
CWE-190
Integer Overflow or Wraparound