CVE-2020-9889

🗓️ 16 Oct 2020 16:38:22Reported by appleType

CVE-2020-9889 out-of-bounds write issue fixed in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6

Reporter	Title	Published	Views	Family All 21
Apple	About the security content of tvOS 13.4.8	15 Jul 202000:00	–	apple
Apple	About the security content of watchOS 6.2.8	15 Jul 202000:00	–	apple
Apple	About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra	15 Jul 202000:00	–	apple
Apple	About the security content of iOS 13.6 and iPadOS 13.6	15 Jul 202000:00	–	apple
Apple	About the security content of iOS 13.6 and iPadOS 13.6 - Apple Support	15 Dec 202005:18	–	apple
Apple	About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra - Apple Support	15 Dec 202006:08	–	apple
Apple	About the security content of tvOS 13.4.8 - Apple Support	15 Dec 202005:58	–	apple
Apple	About the security content of watchOS 6.2.8 - Apple Support	15 Dec 202005:53	–	apple
Tenable Nessus	Apple iOS < 13.6 Multiple Vulnerabilities	17 Jul 202000:00	–	nessus
Tenable Nessus	macOS 10.15.x < 10.15.6 / 10.14.x < 10.14.6 Security Update 2020-004 / 10.13.x < 10.13.6 Security Update 2020-004	1 Oct 202000:00	–	nessus

NVD

Vulners

Node

apple ipadosRange<13.6

apple iphone_osRange<13.6

apple mac_os_xRange10.13–10.13.6

apple mac_os_xRange10.14–10.14.6

apple mac_os_xRange10.15–10.15.6

apple mac_os_xMatch10.13.6-

apple mac_os_xMatch10.13.6security_update_2018-002

apple mac_os_xMatch10.13.6security_update_2018-003

apple mac_os_xMatch10.13.6security_update_2019-001

apple mac_os_xMatch10.13.6security_update_2019-002

apple mac_os_xMatch10.13.6security_update_2019-003

apple mac_os_xMatch10.13.6security_update_2019-004

apple mac_os_xMatch10.13.6security_update_2019-005

apple mac_os_xMatch10.13.6security_update_2019-006

apple mac_os_xMatch10.13.6security_update_2019-007

apple mac_os_xMatch10.13.6security_update_2020-001

apple mac_os_xMatch10.13.6security_update_2020-002

apple mac_os_xMatch10.13.6security_update_2020-003

apple mac_os_xMatch10.14.6-

apple mac_os_xMatch10.14.6security_update_2019-001

apple mac_os_xMatch10.14.6security_update_2019-002

apple mac_os_xMatch10.14.6security_update_2019-004

apple mac_os_xMatch10.14.6security_update_2019-005

apple mac_os_xMatch10.14.6security_update_2019-006

apple mac_os_xMatch10.14.6security_update_2019-007

apple mac_os_xMatch10.14.6security_update_2020-001

apple mac_os_xMatch10.14.6security_update_2020-002

apple mac_os_xMatch10.14.6security_update_2020-003

apple tvosRange<13.4.8

apple watchosRange<6.2.8

[
  {
    "product": "iOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "iOS 13.6 and iPadOS 13.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "macOS Catalina 10.15.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "tvOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "tvOS 13.4.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "watchOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "watchOS 6.2.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-1391/
support	www.support.apple.com/HT211288
support	www.support.apple.com/HT211290
support	www.support.apple.com/HT211291
support	www.support.apple.com/HT211289

21 Nov 2024 05:41Current

8.1High risk

Vulners AI Score8.1

CVSS 26.8

CVSS 3.17.8

EPSS0.00447

CWE-787