CVE-2021-1748

CVE-2021-1748: A validation issue in processing a URL was fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. The vulnerability could allow arbitrary javascript execution when handling a malicious URL. Connected Apple advisories (HT212149/HT212148/HT212146) confirm the affected platforms a...

CVE-2021-1747

CVE-2021-1747 is an Apple macOS/iOS/tvOS/watchOS vulnerability describing an out-of-bounds write mitigated by improved input validation. Affected products include macOS Big Sur 11.2; Security Update 2021-001 Catalina and Mojave; iOS 14.4 / iPadOS 14.4; watchOS 7.3; tvOS 14.4. Impact: processing m...

CVE-2021-1744

CVE-2021-1744 affects Apple platforms including macOS Big Sur 11.2, macOS Catalina/Mojave with Security Update 2021-001, iOS 14.4, iPadOS 14.4, watchOS 7.3 and tvOS 14.4. The issue is an out-of-bounds write in the ImageIO (and related image-processing) path triggered by processing a maliciously c...

CVE-2021-1743

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2021-1742

The CVE-2021-1742 entry is confirmed as a real vulnerability affecting Apple platforms where processing a maliciously crafted image could lead to arbitrary code execution. Publicly documented fixes reside in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and Mojave, watchOS 7.3, tvO...

CVE-2021-1742

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2021-1741

CVE-2021-1741 is an out-of-bounds read in a macOS/iOS image-processing component. Processing a maliciously crafted image may lead to arbitrary code execution. It is fixed via macOS Big Sur 11.2, Security Update 2021-001 (Catalina 11.2, Mojave 11.2), watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4.

CVE-2021-1741

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code...

CVE-2020-29624

CVE-2020-29624 concerns a memory corruption issue in the processing of font files. The vulnerability is mitigated by improved input validation and is fixed across Apple platforms including watchOS 7.2, macOS Big Sur 11.1, Security Updates for Catalina and Mojave, and iOS/iPadOS 14.3, tvOS 14.3. A...

CVE-2020-29619

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may...

CVE-2020-29617

CVE-2020-29617 relates to an out-of-bounds read in ImageIO processing that could lead to heap corruption when handling maliciously crafted images. Affected software versions include tvOS 14.3; macOS Big Sur 11.1; Security Update 2020-001 Catalina and 2020-007 Mojave; iOS 14.3 and iPadOS 14.3; iCl...

CVE-2020-29615

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of servi...

CVE-2020-29611

CVE-2020-29611 is an out-of-bounds write in ImageIO that could lead to arbitrary code execution when processing a malicious image. Apple lists fixes across multiple products/updates: tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 / iPad...

CVE-2020-29608

CVE-2020-29608 is an out-of-bounds read in FontParser that could allow a remote attacker to leak memory. Public descriptions tie this to macOS Big Sur (11.x) and macOS Catalina 10.15.x, with fixes delivered in macOS Big Sur 11.2 and Security Update 2021-001 (Catalina), as well as related iOS/tvOS...

CVE-2020-29608

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS...

CVE-2020-29610

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may disclose restricted...

CVE-2020-29610

CVE-2020-29610 is an out-of-bounds read vulnerability in Apple's media stack, specifically impacting AudioToolboxCore MP4 parsing. The issue could disclose restricted memory when processing a maliciously crafted audio file. Affected products include Apple platforms on macOS Big Sur 11.1, watchOS ...

CVE-2020-27951

CVE-2020-27951 affects Apple platforms (watchOS, iOS, iPadOS) and is described by multiple sources as an issue that allowed unauthorized code execution leading to an authentication policy violation. Apple’s security updates indicate fixes in watchOS 6.3, watchOS 7.2, iOS 12.5, and iOS/iPadOS 14.3...

CVE-2020-27951

This issue was addressed with improved checks. This issue is fixed in watchOS 6.3, iOS 12.5, iOS 14.3 and iPadOS 14.3, watchOS 7.2. Unauthorized code execution may lead to an authentication policy violation...

CVE-2020-27946

An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted font may result in the...