CVE-2020-27909

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2020-27909

CVE-2020-27909 affects Apple CoreAudio across Apple platforms (iOS/iPadOS, macOS/iPadOS/tvOS/watchOS) via processing a maliciously crafted audio file. The issue is an out-of-bounds read that was addressed with improved input validation and is fixed in iOS 14.2 and iPadOS 14.2 (also reflected for ...

CVE-2020-27910

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2020-27905

CVE-2020-27905 is a memory corruption issue addressed by Apple in iOS 14.2, iPadOS 14.2, tvOS 14.2, and watchOS 7.1. The vulnerability could allow a malicious application to execute arbitrary code with system privileges. The NVD entry notes a local attack vector with low attack complexity and use...

CVE-2020-27905

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2020-10017

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2020-10017

CVE-2020-10017 is an out-of-bounds write in Apple's audio handling that could allow arbitrary code execution. Apple’s advisories (HT211929/HT211930) state the issue affects CoreAudio across macOS Big Sur 11.0.x and iOS/iPadOS 14.2 (also tvOS 14.2 and watchOS 7.1), with fixed patches in those OS u...

CVE-2020-10003

CVE-2020-10003 affects Apple platforms via a vulnerability in the path validation logic for symlinks, enabling a local privilege escalation. It is fixed in macOS Big Sur 11.0.1, iOS 14.2/iPadOS 14.2, tvOS 14.2, and watchOS 7.1 through improved path sanitization. Affected components are tied to Cr...

CVE-2020-10003

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges...

CVE-2020-10013

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-10013

CVE-2020-10013 is a kernel-privilege escalation tied to a logic issue addressed by Apple in tvOS 14.0, iOS 14.0 and iPadOS 14.0. The issue is described as a logic/state-management defect that could allow an application to execute arbitrary code with kernel privileges. Apple’s advisories (HT211843...

CVE-2020-10010

CVE-2020-10010 describes a path handling issue that affects macOS and related Apple OS components, with a local attacker able to elevate privileges due to insufficient path validation. The issue is addressed by improved validation in the code paths involved, and is fixed in Apple platforms as fol...

CVE-2020-10010

A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges...

CVE-2020-9974

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to determine kernel memory layout...

CVE-2020-9974

CVE-2020-9974 is a kernel-level logic issue in the XNU kernel that could allow a malicious app to determine kernel memory layout. Apple fixed it by improved state management, with patches in macOS Big Sur 11.0.1 and iOS/iPadOS 14.2 (as well as tvOS/watchOS updates per HT211930/HT211929).

CVE-2020-10002

CVE-2020-10002 is a local-privilege issue described as a logic issue that was fixed by improved state management. Affected software includes macOS Big Sur 11.0.1 and other Apple platforms updated with 14.2 or later, notably iOS 14.2, iPadOS 14.2, watchOS 7.1, tvOS 14.2, iCloud for Windows 11.5, a...

CVE-2020-10002

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A local user may be able to read arbitrary files...

CVE-2020-9965

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9965

CVE-2020-9965 is an out-of-bounds read in Disk Images that Apple fixes with improved input validation across macOS Big Sur 11.0.1 and related OS versions (watchOS 7.0, tvOS 14.0, iOS/iPadOS 14.0). The bulletin notes that an affected application may be able to execute arbitrary code with kernel pr...

CVE-2020-9969

CVE-2020-9969 affects macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. Description from Apple Security Advisories shows an access issue that allowed a local user to view sensitive information, addressed by applying additional sandbox restrictions. The remediation is upgradi...