CVE-2021-1759

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1746

CVE-2021-1746 affects Apple platforms (macOS Big Sur 11.2, Catalina 11.x/Pro, Mojave, watchOS, tvOS, iOS/iPadOS 14.4) where a maliciously crafted image could lead to arbitrary code execution. The issue is resolved via Apple security updates listed in the sources (e.g., HT212149/HT212147/HT212146/...

CVE-2021-1746

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1742

The CVE-2021-1742 entry is confirmed as a real vulnerability affecting Apple platforms where processing a maliciously crafted image could lead to arbitrary code execution. Publicly documented fixes reside in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, watchOS 7.3, tvO...

CVE-2021-1741

CVE-2021-1741 is an out-of-bounds read in a macOS/iOS image-processing component. Processing a maliciously crafted image may lead to arbitrary code execution. It is fixed via macOS Big Sur 11.2, Security Update 2021-001 (Catalina 11.2, Mojave 11.2), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4.

CVE-2021-1741

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2021-1738

CVE-2021-1738 is an out-of-bounds write vulnerability in macOS components that process images, enabling arbitrary code execution when handling a malicious image. Apple’s advisory (HT212147) attributes the issue to image processing paths and notes the root cause as an improper input validation/mem...

CVE-2020-29619

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may...

CVE-2020-29621

CVE-2020-29621 is an Apple macOS vulnerability reported across multiple sources. It affects the AppleMobileFileIntegrity component and allowed a malicious application to bypass Privacy preferences. Apple’s security updates fixed the issue in macOS Big Sur 11.1 and in Security Update 2020-001 Cata...

CVE-2020-29620

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges...

CVE-2020-29620

CVE-2020-29620 affects macOS and relates to privilege escalation via entitlements. The issue is described as being addressed with improved entitlements and fixed in macOS Big Sur 11.1, Catalina Security Update 2020-001, and Mojave Security Update 2020-007. The Apple advisory HT212011 corroborates...

CVE-2020-29615

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of servi...

CVE-2020-27949

CVE-2020-27949 involves a memory-access vulnerability in macOS DTrace probes via /dev/fasttrap that allowed a non-privileged process to read (and potentially write) memory of other processes traced under DTrace. The PoC exploit demonstrates creating probes in victim processes and replacing memory...

CVE-2020-27945

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2020-27938

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to...

CVE-2020-27938

CVE-2020-27938 is a logic/state-management issue in macOS components that could allow a malicious app to elevate privileges. It is fixed by Apple in macOS Big Sur 11.2 and Security Updates 2020-001 Catalina, 2020-007 Mojave, 2021-001 Catalina, and 2021-001 Mojave, plus macOS Big Sur 11.1. There i...

CVE-2020-27941

CVE-2020-27941 concerns a validation issue in AppleGraphicsControl that could allow an application to execute arbitrary code with kernel privileges. The Apple security content notes the fix in macOS Big Sur 11.1 and Security Updates 2020-001 Catalina / 2020-007 Mojave, indicating these updates ad...

CVE-2020-27939

CVE-2020-27939 affects macOS ImageIO in supported Apple OS releases. A memory corruption issue in processing a maliciously crafted image was addressed by Apple with improved input validation, and is fixed in macOS Big Sur 11.1 as well as Security Update 2020-001 Catalina and Security Update 2020-...

CVE-2020-27933

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, iCloud for Windows 7.20, watchOS 6.2.8, tvOS 13.4.8, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously...

CVE-2020-27936

An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A local user may be able to cause unexpected system...