CVE-2020-27908

CVE-2020-27908 is an Apple macOS/audio issue where an out-of-bounds read in CoreAudio during processing of a maliciously crafted audio file could lead to arbitrary code execution. The vulnerability affects macOS and iOS-family OS updates and was addressed by input-validation hardening and memory ...

CVE-2020-27908

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, watchOS 7.1, tvOS 14.2. Processing a maliciously crafted audio file ma...

CVE-2020-27899

CVE-2020-27899 describes a use-after-free vulnerability that was addressed with improved memory management. The issue could allow a local attacker to elevate privileges. Apple confirms fixes in multiple platforms and releases: iOS 14.2 and iPadOS 14.2, macOS Big Sur 11.0.1, watchOS 7.1, and tvOS ...

CVE-2020-9975

CVE-2020-9975 is a use-after-free memory corruption issue that, if exploited, could allow an attacker to execute arbitrary code with kernel privileges. Public details in the initial description indicate this vulnerability affects macOS kernel (XNU) and related Apple OS components, with root cause...

CVE-2020-9975

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute...

CVE-2020-9978

This issue was addressed with improved setting propagation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. An attacker in a privileged network position may be ab...

CVE-2020-9978

CVE-2020-9978 is an Apple macOS/iOS family issue: a memory/setting-propagation flaw that could allow an attacker in a privileged network position to unexpectedly alter application state. Affected products include macOS Big Sur (11.0.1, 11.1), macOS Catalina (Security Update 2020-001), macOS Mojav...

CVE-2020-9926

CVE-2020-9926 describes a use-after-free in memory management when processing XML, addressed in Apple updates. Affected products include iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for Windows 7.20, macOS Catalina 10.15.6, and Security Update 2020-004 for Mojave and High Sierra. ...

CVE-2020-9956

CVE-2020-9956 is an out-of-bounds/memory handling issue affecting Apple font parsing components (FontParser/CoreText) where processing a maliciously crafted font file could lead to arbitrary code execution. The vulnerability is addressed in Apple security updates for macOS Big Sur 11.0.1, macOS B...

CVE-2020-9956

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font file may...

CVE-2020-9967

Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, tvOS 14.0, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0 and iPadOS 14.0. A remote attacker may be able to...

CVE-2020-9967

CVE-2020-9967 affects the macOS kernel. The issue is described as multiple memory corruption problems that were addressed by improved input validation, with fixes in macOS Big Sur 11.0.1 and 11.1, tvOS 14.0, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, watchOS 7.0, iOS 14.0...

CVE-2020-9962

CVE-2020-9962 is associated with Apple macOS FontParser. The vulnerability allowed a buffer overflow when processing a malicious font file, due to insufficient size validation in the FontParser component. This could enable arbitrary code execution. The issue is fixed in macOS Big Sur 11.0.1, with...

CVE-2020-9955

CVE-2020-9955 is an ImageIO out-of-bounds write vulnerability in Apple platforms. Apple reports that processing a maliciously crafted image may lead to arbitrary code execution. Concrete details across connected sources show the issue affecting ImageIO on iOS 14.0 / iPadOS 14.0, tvOS 14.0, watchO...

CVE-2020-9960

CVE-2020-9960 affects Apple platforms (macOS Big Sur 11.x, macOS Catalina 10.15.x, tvOS 14.0, watchOS 7.0, iOS 14.0, iPadOS 14.0). The root cause is an out-of-bounds read in the audio processing path, addressed by improved input validation. The vulnerability could allow arbitrary code execution t...

Apple watchOS 缓冲区错误漏洞

Apple watchOS is a set of smartwatch operating systems from the American company Apple. A security vulnerability exists in watchOS 7.2, which stems from the processing of maliciously crafted images that may result in a denial of service. The following products and versions are fixed: watchOS 7.2,...

PT-2021-12858

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 iCloud for Windows versions prior to 7.20 macOS Catalina versions prior to 10.15.6 macOS Mojave versions prior to Security...

PT-2021-13542

Name of the Vulnerable Software and Affected Versions: Apple tvOS versions prior to 14.4 Apple watchOS versions prior to 7.3 Apple iOS versions prior to 14.4 Apple iPadOS versions prior to 14.4 Description: A validation issue was addressed with improved input sanitization. Processing a maliciousl...

PT-2021-11437

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 iCloud for Windows versions prior to 7.20 watchOS versions prior to 6.2.8 tvOS versions prior to 13.4.8 macOS Catalina versions prior to 10.15.6 macOS Mojave versions prior to Security...

CVE-2021-1772: Out-of-bounds Write

A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code...