CVE-2020-9842

CVE-2020-9842 is an entitlement parsing issue in Apple's OS stack. The vulnerability arises when parsing entitlements, allowing a malicious application to interact with system processes and potentially access private information or perform privileged actions. The issue has concrete fixes across m...

CVE-2020-9842

An entitlement parsing issue was addressed with improved parsing. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application could interact with system processes to access private information and perform privileged actions...

CVE-2020-9839

A race condition was addressed with improved state handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. An application may be able to gain elevated privileges...

CVE-2020-9839

CVE-2020-9839 is a race-condition vulnerability across Apple platforms that was fixed by state-handling improvements. Public details show impact as potential privilege escalation. Fixes were released in iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5, with System Preferenc...

CVE-2020-9829

CVE-2020-9829 : A validation issue affecting CoreText in Apple platforms, mitigated by the iOS/iPadOS 13.5, tvOS 13.4.5, and watchOS 6.2.5 patches. The flaw stems from improper input handling of a text-message payload, described as a validation/improved input sanitization issue. Impact per docs i...

CVE-2020-9827

CVE-2020-9827 is an input-validation–related denial-of-service issue fixed across Apple platforms: iOS/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. A remote attacker may trigger a DoS by exploiting improper input handling. Affected components and root cause are described i...

CVE-2020-9821

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...

CVE-2020-9821

CVE-2020-9821 is a memory corruption vulnerability in Apple’s kernel that could allow a malicious application to execute arbitrary code with kernel privileges. Apple’s security updates indicate this issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5...

CVE-2020-9789

CVE-2020-9789 is an out-of-bounds write issue in Apple image processing paths that was fixed by Apple in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and corresponding Windows/iCloud components. The vulnerability could allow arbitrary code execution when processing a ...

CVE-2020-9818

CVE-2020-9818 describes an out‑of‑bounds write in the Mail component of Apple iOS/iPadOS/watchOS. Affected versions: iOS 13.5 and iPadOS 13.5, iOS 12.4.7, and watchOS 6.2.5. Root cause: improved bounds checking in handling of malicious mail messages may prevent memory corruption. Impact as stated...

CVE-2020-9818

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5. Processing a maliciously crafted mail message may lead to unexpected memory modification or application termination...

CVE-2020-9819

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption...

CVE-2020-9819

CVE-2020-9819 is a memory consumption issue in Apple’s Mail processing that can lead to heap corruption when handling a maliciously crafted mail message. Public sources confirm the vulnerability affects Apple platforms and was fixed in specific updates: iOS 13.5, iPadOS 13.5, iOS 12.4.7, watchOS ...

CVE-2020-9819

A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.5 and iPadOS 13.5, iOS 12.4.7, watchOS 6.2.5, watchOS 5.3.7. Processing a maliciously crafted mail message may lead to heap corruption...

CVE-2020-9816

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution...

CVE-2020-9816

CVE-2020-9816 is an out-of-bounds write in FontParser that could cause termination or arbitrary code execution when parsing a malicious PDF. The issue affects Apple platforms and was addressed in iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, and watchOS 6.2.5. Apple describes the pat...

CVE-2020-9815

CVE-2020-9815 affects multiple Apple platforms (iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5). Description: Processing a maliciously crafted audio file may lead to arbitrary code execution due to an out-of-bounds read, addressed by improved bounds checking. Affected co...

CVE-2020-9790

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may...

CVE-2020-9790

CVE-2020-9790 is an out-of-bounds write issue in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple’s advisories indicate the vulnerability was fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, and related Wind...

CVE-2020-9813

A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5. A malicious application may be able to execute arbitrary code with kernel privileges...