CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2020-27912

CVE-2020-27912: A memory-unsafe out-of-bounds write in ImageIO when processing a maliciously crafted image could lead to arbitrary code execution. Public details in the Apple advisory HT211931/HT211929 indicate the issue affected macOS Big Sur (fixed in 11.0.1) and related iOS/watchOS/iPadOS upda...

CVE-2020-27909

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2020-27909

CVE-2020-27909 affects Apple CoreAudio across Apple platforms (iOS/iPadOS, macOS/iPadOS/tvOS/watchOS) via processing a maliciously crafted audio file. The issue is an out-of-bounds read that was addressed with improved input validation and is fixed in iOS 14.2 and iPadOS 14.2 (also reflected for ...

CVE-2020-27910

CVE-2020-27910 affects Apple audio handling across macOS Big Sur 11.0.1 and iOS 14.2/iPadOS 14.2 (also tvOS 14.2, watchOS 7.1). The issue is described as an out-of-bounds read in audio processing, mitigated by improved input validation and addressed in the listed updates. Impact per document: pro...

CVE-2020-27910

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2020-27905

CVE-2020-27905 is a memory corruption issue addressed by Apple in iOS 14.2, iPadOS 14.2, tvOS 14.2, and watchOS 7.1. The vulnerability could allow a malicious application to execute arbitrary code with system privileges. The NVD entry notes a local attack vector with low attack complexity and use...

CVE-2020-27905

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2020-27902

An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A person with physical access to an iOS device may be able to access stored passwords without authentication...

CVE-2020-27902

CVE-2020-27902 is an Apple iOS/iPadOS vulnerability describing an authentication issue where a user with physical access could access stored passwords without authentication. Apple fixed this issue in iOS 14.2 and iPadOS 14.2 by improving state management. The CVE appears under Keyboard in the Ap...

CVE-2020-10017

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. Processing a maliciously crafted audio file may lead to arbitrary code execution...

CVE-2020-10017

CVE-2020-10017 is an out-of-bounds write in Apple's audio handling that could allow arbitrary code execution. Apple’s advisories (HT211929/HT211930) state the issue affects CoreAudio across macOS Big Sur 11.0.x and iOS/iPadOS 14.2 (also tvOS 14.2 and watchOS 7.1), with fixed patches in those OS u...

CVE-2020-10016

CVE-2020-10016 is a memory corruption issue addressed via improved state management. It is fixed in macOS Big Sur 11.0.1, iOS 14.2 / iPadOS 14.2, tvOS 14.2, and watchOS 7.1, with potential for arbitrary code execution with kernel privileges as described by Apple advisories and related Red Hat enr...

CVE-2020-10011

CVE-2020-10011: An out-of-bounds read vulnerability was fixed by improved bounds checking when processing a maliciously crafted USD file. Affected platforms include iOS 14.2, iPadOS 14.2, macOS Catalina 10.15.7, and Security Update 2020-005 for High Sierra and Mojave. Exploitation could lead to u...

CVE-2020-10011

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 14.2 and iPadOS 14.2, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave. Processing a maliciously crafted USD file may lead to unexpected application terminati...

CVE-2020-10003

CVE-2020-10003 affects Apple platforms via a vulnerability in the path validation logic for symlinks, enabling a local privilege escalation. It is fixed in macOS Big Sur 11.0.1, iOS 14.2/iPadOS 14.2, tvOS 14.2, and watchOS 7.1 through improved path sanitization. Affected components are tied to Cr...

CVE-2020-10003

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A local attacker may be able to elevate their privileges...

CVE-2020-10004

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution...

CVE-2020-10004

CVE-2020-10004 is a logic-issue vulnerability fixed in Apple OS updates: macOS Big Sur 11.0.1, iOS 14.2, and iPadOS 14.2. The issue arises from improved state management and may allow an attacker to cause an application to terminate unexpectedly or execute arbitrary code when a maliciously crafte...

CVE-2020-10013

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...