Lucene search

K
cvelistAppleCVELIST:CVE-2020-9897
HistoryOct 28, 2021 - 6:15 p.m.

CVE-2020-9897

2021-10-2818:15:09
apple
www.cve.org
6
input validation
ios 14.2
ipados 14.2
macos big sur 11.0.1
arbitrary code execution
pdf

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

35.0%

An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1. Processing a maliciously crafted PDF may lead to arbitrary code execution.

CNA Affected

[
  {
    "product": "iOS and iPadOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "14.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "macOS",
    "vendor": "Apple",
    "versions": [
      {
        "lessThan": "11.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

35.0%

Related for CVELIST:CVE-2020-9897