CVE-2020-9887

CVE-2020-9887 is a memory-corruption vulnerability in Apple’s ImageIO JPEG handling that can lead to arbitrary code execution when viewing a malformed JPEG. It is fixed in macOS Catalina 10.15.6 (Security Update 2020-004 Mojave/High Sierra entries accompany the update). The accompanying ZDI advis...