PT-2020-20548

Name of the Vulnerable Software and Affected Versions HUAWEI P30 Pro versions prior to 10.1.0.123C432E19R2P5patch02 HUAWEI P30 Pro versions prior to 10.1.0.126C10E11R5P1 HUAWEI P30 Pro versions prior to 10.1.0.160C00E160R2P8 Description The issue is related to a logic check error. It occurs when...

CVE-2020-9254: Improper Input Validation

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123C432E19R2P5patch02, versions earlier than 10.1.0.126C10E11R5P1, and versions earlier than 10.1.0.160C00E160R2P8 have a logic check error vulnerability. A logic error occurs when the software checking the size of certain parameter, th...

CVE-2020-9255: Improper Input Validation

Huawei Honor 10 smartphones with versions earlier than 10.0.0.178C00E178R1P4 have a denial of service vulnerability. Certain service in the system does not sufficiently validate certain parameter which is received, the attacker should trick the user into installing a malicious application,...

PT-2020-20553

Name of the Vulnerable Software and Affected Versions Huawei Honor V30 versions prior to 10.1.0.212C00E210R5P1 Description The system has an improper authentication issue due to insufficient validation of certain parameters. An attacker could exploit this by tricking a user into installing a...

CVE-2020-9851

An access issue was addressed with improved access restrictions. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to modify protected parts of the file system...

CVE-2020-9842

An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application could interact with system processes to access private information and perform privileged actions...

CVE-2020-9817

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges...

CVE-2020-9814

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9817

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges...

Input validation

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to gain root privileges...

Authentication flaw

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5. A malicious application may be able to bypass Privacy preferences...

Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to break out of its sandbox...

CVE-2020-9814

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

Design/Logic Flaw

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Catalina 10.15.5. A malicious application may be able to execute arbitrary code with kernel privileges...

Memory corruption

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9852

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9842

An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application could interact with system processes to access private information and perform privileged actions...

CVE-2020-9817

CVE-2020-9817 concerns a permissions issue in macOS Catalina that was fixed with improved permission validation in macOS 10.15.5. The entry states that a malicious application may gain root privileges if the issue is exploited. Public references in the provided documents align with Apple’s securi...

PT-2020-20780 · Apple · Macos Catalina +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 macOS Catalina versions prior to 10.15.5 tvOS versions prior to 13.4.5 watchOS versions prior to 6.2.5 Description: A memory corruption issue was addressed with improved state managemen...

Unspecified vulnerability in AppleMobileFileIntegrity component of multiple Apple products (CNVD-2020-34932)

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets.Apple macOS Catalina is a specialized operating system developed for Mac computers.Apple MacOS Catalina is a plug-in with file integrit...