CVE-2020-9881

CVE-2020-9881 is a buffer overflow vulnerability in Apple's USD file processing path that affects iOS, iPadOS, macOS, and watchOS. The issue stems from improper memory handling when processing a malicious USD file, potentially leading to application termination or arbitrary code execution. Apple ...

CVE-2020-9873

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to...

CVE-2020-9873

CVE-2020-9873 describes an out-of-bounds read in the Apple ImageIO component that could lead to arbitrary code execution when processing a malicious image. The vulnerability is fixed in multiple Apple platform updates, including iOS 13.6 / iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS...

CVE-2020-9877

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead to...

CVE-2020-9877

CVE-2020-9877 concerns an out-of-bounds read that was addressed in Apple’s security updates. According to the vendor-supplied details, processing a maliciously crafted image could lead to arbitrary code execution. The fixed versions across affected platforms include iOS 13.6 and iPadOS 13.6, macO...

CVE-2020-9875

CVE-2020-9875 concerns an integer overflow that was addressed by improving input validation. The published details indicate the issue affects Apple’s ImageIO (and related image-processing paths) across macOS/iOS/watchOS/tvOS platforms and associated Windows/iCloud components. The vulnerability co...

CVE-2020-9876

CVE-2020-9876 is an out-of-bounds write in Apple's ImageIO component that can be triggered by processing a malicious PDF. Affected products include macOS/iOSwatch/tvOS/watchOS families via ImageIO, and Windows (iCloud for Windows, iTunes for Windows) and tvOS updates. Public details in connected ...

CVE-2020-9874

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may...

CVE-2020-9871

CVE-2020-9871: An out-of-bounds write in ImageIO (openEXR handling) may allow arbitrary code execution when processing a malicious image. Affected products include Apple OSes and related apps; Apple’s mitigations are in security updates. Remediation: patch in iOS 13.6/iPadOS 13.6, macOS Catalina ...

CVE-2020-9871

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may...

CVE-2020-9868

A certificate validation issue existed when processing administrator added certificates. This issue was addressed with improved certificate validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An attacker may have been able to impersonat...

CVE-2020-9868

CVE-2020-9868: A certificate validation issue occurred when processing administrator-added certificates on Apple platforms. The root cause is a validation flaw that could allow impersonation of a trusted website via shared key material associated with an administrator-added certificate. Affected ...

CVE-2020-9863

CVE-2020-9863 affects Apple platforms (iOS 13.6/iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8). Description: a memory initialization issue was fixed via improved memory handling; impact: an application may execute arbitrary code with kernel privileges. Mitigation: apply the Appl...

CVE-2020-9863

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9772

CVE-2020-9772 involves a logic issue that allowed a sandboxed process to potentially circumvent sandbox restrictions. Apple states this vulnerability affects multiple platforms and was fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, and watchOS 6.2. The description emphasize...

CVE-2020-9787

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari Preferences...

CVE-2020-3918

An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A local user may be able to view sensitive user information...

CVE-2020-3918

CVE-2020-3918 affects Apple platforms (iOS/iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2). Root cause described as an access issue resolved by additional sandbox restrictions, reducing the ability of a local user to view sensitive information. Affected components are tied to sandbox...

PT-2020-20828 · Apple · Itunes For Windows +7

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 iTunes for Windows versions prior to 12.10.8 iCloud for Windows versions prior to...

PT-2020-20819 · Apple · Macos Catalina +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 macOS Catalina versions prior to 10.15.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: A certificate validation issue existed when processing...