CVE-2020-9853

A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to determine kernel memory layout...

CVE-2020-9779

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-9779

CVE-2020-9779 is an out-of-bounds read vulnerability in macOS components fixed in macOS Catalina 10.15.4. The issue could allow a local user to terminate a sandboxed process or read kernel memory. Public sources (NVD) describe the flaw as addressed by input validation improvements and patching in...

CVE-2020-9908: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-9929: Out-of-bounds Write

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to cause unexpected system termination or read kernel memory...

CVE-2020-9906: Improper Input Validation

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2020-9779: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memory...

PT-2020-20754

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description An out-of-bounds read issue was addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory. Recommendations For versions prior to...

PT-2020-20873

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.6 Description A memory corruption issue was addressed with improved memory handling, which could allow a local user to cause unexpected system termination or read kernel memory. Recommendations For versions prior ...

PT-2020-20806

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15.4 Description A memory corruption issue was addressed with improved validation. A malicious application may be able to determine kernel memory layout. Recommendations For versions prior to 10.15.4, update to macOS...

PT-2020-16761

Name of the Vulnerable Software and Affected Versions Xen versions through 4.14.x Description An issue allows x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents. This is because invalidation of TLB entries is mishandled during use of an INVLPG-like attack...

kernel: net: bluetooth: information leak when processing certain AMP packets

An information leak flaw was found in the way Linux kernel’s Bluetooth stack implementation handled initialization of stack memory when handling certain AMP Alternate MAC-PHY Manager Protocol packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory o...

USN-4591-1 linux, linux-hwe, linux-hwe-5.4, linux-oem, linux-raspi, linux-raspi-5.4, linux-snapdragon vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

CVE-2020-9964

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory...

CVE-2020-9964

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory...

CVE-2020-9958

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 14.0 and iPadOS 14.0. An application may be able to cause unexpected system termination or write kernel memory...

CVE-2020-9909

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations...

CVE-2020-9909

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations...

Input validation

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

Memory corruption

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read kernel memory...