CVE-2020-9789

CVE-2020-9789 is an out-of-bounds write issue in Apple image processing paths that was fixed by Apple in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and corresponding Windows/iCloud components. The vulnerability could allow arbitrary code execution when processing a ...

CVE-2020-9816

CVE-2020-9816 is an out-of-bounds write in FontParser that could cause termination or arbitrary code execution when parsing a malicious PDF. The issue affects Apple platforms and was addressed in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. Apple describes the pat...

CVE-2020-9816

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution...

CVE-2020-9815

CVE-2020-9815 affects multiple Apple platforms (iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5). Description: Processing a maliciously crafted audio file may lead to arbitrary code execution due to an out-of-bounds read, addressed by improved bounds checking. Affected co...

CVE-2020-9790

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may...

CVE-2020-9790

CVE-2020-9790 is an out-of-bounds write issue in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple’s advisories indicate the vulnerability was fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and related Wind...

CVE-2020-9813

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9813

CVE-2020-9813 describes a logic issue causing memory corruption in Apple systems. The issue could allow a malicious application to execute arbitrary code with kernel privileges. Apple’s advisories show the fix being applied in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and wat...

CVE-2020-9814

CVE-2020-9814 is a memory-corruption vulnerability in Apple’s kernel logic, fixed by improved state management. It affects multiple Apple platforms and is capable of allowing a malicious app to execute arbitrary code with kernel privileges. Affected versions are addressed in iOS 13.5/iPadOS 13.5,...

CVE-2020-9814

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9808

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to cause unexpected system termination or write kernel memory...

CVE-2020-9812

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A local user may be able to read kernel memory...

CVE-2020-9812

CVE-2020-9812 is an information-disclosure flaw in Apple platforms where a local user could read kernel memory due to an issue with state management in the kernel. Affected: iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Impact: local read of kernel memory; no remote vector ...

CVE-2020-9807

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to...

CVE-2020-9807

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to...

CVE-2020-9807

CVE-2020-9807 is a memory corruption issue in WebKit components that can occur when processing maliciously crafted web content, potentially enabling arbitrary code execution. The vulnerability affects WebKitGTK and related WebKit builds prior to the fixed version, with upstream fix in WebKit 2.28...

CVE-2020-9811

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A local user may be able to read kernel memory...

CVE-2020-9811

CVE-2020-9811 is an information-disclosure issue on Apple platforms where a local user could read kernel memory due to a state-management flaw. Affected products include iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. The vulnerability is fixed in these releases,...

CVE-2020-9809

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to determine kernel memory layout...

CVE-2020-9809

CVE-2020-9809 describes an information-disclosure issue in Apple systems where a malicious application could determine the kernel memory layout. The vulnerability is addressed by fixes in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, indicating a defense-in-dep...