CVE-2020-9929

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-9902

CVE-2020-9902 is an out-of-bounds read vulnerability in Apple’s kernel component that could allow a malicious app to determine the kernel memory layout. The issue is fixed in iOS 13.6, iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, and watchOS 6.2.8. Connected Apple advisories cite kernel memo...

CVE-2020-9902

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to determine kernel memory layout...

CVE-2020-9908

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-9908

CVE-2020-9908 is an out-of-bounds read vulnerability in Apple’s Intel Graphics Driver on macOS, fixed by macOS Catalina 10.15.6. The issue was addressed with improved input validation, and a local attacker may be able to terminate the system or read kernel memory. The Apple security update HT2112...

CVE-2020-9906

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2020-9853

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to determine kernel memory layout...

CVE-2020-9779

CVE-2020-9779 is an out-of-bounds read vulnerability in macOS components fixed in macOS Catalina 10.15.4. The issue could allow a local user to terminate a sandboxed process or read kernel memory. Public sources (NVD) describe the flaw as addressed by input validation improvements and patching in...

CVE-2020-9779

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

PT-2020-16761

Name of the Vulnerable Software and Affected Versions Xen versions through 4.14.x Description An issue allows x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents. This is because invalidation of TLB entries is mishandled during use of an INVLPG-like attack...

PT-2020-20873

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.6 Description A memory corruption issue was addressed with improved memory handling, which could allow a local user to cause unexpected system termination or read kernel memory. Recommendations For versions prior ...

PT-2020-20806

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description A memory corruption issue was addressed with improved validation. A malicious application may be able to determine kernel memory layout. Recommendations For versions prior to 10.15.4, update to macOS...

PT-2020-20754

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description An out-of-bounds read issue was addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory. Recommendations For versions prior to...

CVE-2020-9779: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-9906: Improper Input Validation

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2020-9908: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-9929: Out-of-bounds Write

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory...

kernel: net: bluetooth: information leak when processing certain AMP packets

An information leak flaw was found in the way Linux kernel’s Bluetooth stack implementation handled initialization of stack memory when handling certain AMP Alternate MAC-PHY Manager Protocol packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory o...

USN-4591-1 linux, linux-hwe, linux-hwe-5.4, linux-oem, linux-raspi, linux-raspi-5.4, linux-snapdragon vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

CVE-2020-9958

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.0 and iPadOS 14.0. An application may be able to cause unexpected system termination or write kernel memory...