Lucene search

[email protected]CVE-2020-9889

HistoryOct 16, 2020 - 5:15 p.m.

CVE-2020-9889

2020-10-1617:15:00

CWE-787

[email protected]

web.nvd.nist.gov

cve-2020-9889

out-of-bounds write

ios

ipados

macos

catalina

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

43.0%

JSON

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

CPENameOperatorVersion
apple:tvosapple tvoslt13.4.8
apple:iphone_osapple iphone oslt13.6
apple:watchosapple watchoslt6.2.8
apple:ipadosapple ipadoslt13.6
apple:mac_os_xapple mac os xlt10.14.6
apple:mac_os_xapple mac os xlt10.15.6
apple:mac_os_xapple mac os xeq10.13.6

CPE	Name	Operator	Version
apple:tvos	apple tvos	lt	13.4.8
apple:iphone_os	apple iphone os	lt	13.6
apple:watchos	apple watchos	lt	6.2.8
apple:ipados	apple ipados	lt	13.6
apple:mac_os_x	apple mac os x	lt	10.14.6
apple:mac_os_x	apple mac os x	lt	10.15.6
apple:mac_os_x	apple mac os x	eq	10.13.6

References

support.apple.com/HT211288

support.apple.com/HT211289

support.apple.com/HT211290

support.apple.com/HT211291

www.zerodayinitiative.com/advisories/ZDI-20-1391/

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.2 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

43.0%

JSON

Related for CVE-2020-9889

cvelist1 zdi1 prion1 apple8 nessus1