CVE-2020-3877

CVE-2020-3877 is an out-of-bounds read vulnerability in Apple components (reported in Apple security content for macOS Catalina and watchOS) that could allow a remote attacker to cause unexpected termination or arbitrary code execution. The issue is fixed in macOS Catalina 10.15.3 and watchOS 6.1...

CVE-2020-3857

CVE-2020-3857 is a memory corruption issue in Apple OS components that is fixed in iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. The description states an application may be able to execute arbitrary code with system privileges due to improved memory handling. ...

CVE-2020-3846

CVE-2020-3846 is a buffer overflow vulnerability described as being mitigated by improved size validation. Public details in the provided documents indicate Apple platforms are affected, including iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iTunes for Windows...

CVE-2020-3860

CVE-2020-3860 is a memory corruption issue in Apple’s kernel that could allow an attacker to execute arbitrary code with kernel privileges. Root cause: memory corruption due to improper input handling. Affected: Apple devices running iOS 13.x (fixed in iOS 13.3.1 and iPadOS 13.3.1) and watchOS 6....

CVE-2020-3872

CVE-2020-3872 is a memory initialization issue in Apple platforms causing an application to read restricted memory. It is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. Affected components are kernel/memory handling across Apple OS releases; remedia...

CVE-2020-3872

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to read restricted memory...

CVE-2020-3878

CVE-2020-3878 is an out-of-bounds read vulnerability in Apple’s ImageIO component. According to Apple security updates, it affects iOS 13.5/iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes for Windows, and iCloud for Windows; processing a maliciously crafted image may lead ...

CVE-2020-3875

CVE-2020-3875Fixes a validation issue addressed by improved input sanitization. Affects Apple platforms including iOS/iPadOS, macOS Catalina, tvOS, watchOS, and kernel components where an application may read restricted memory. Public details indicate the vulnerability is mitigated by updates to ...

CVE-2020-3870

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2020-3870

CVE-2020-3870 relates to an out-of-bounds read in ImageIO that could allow arbitrary code execution when processing a maliciously crafted image. Apple fixed this via input-validation improvements and OS updates including iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6...

CVE-2020-3836

An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to determine kernel memory layout...

CVE-2020-3838

The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with system privileges...

CVE-2020-3842

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-3834

A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 6.1.2. An application may be able to execute arbitrary code with kernel privileges...

CVE-2020-3838

CVE-2020-3838 affects Apple platforms with a local-privilege escalation via improved permissions logic. The issue allows an application to execute arbitrary code with system/kernel privileges. Fixed in iOS 13.3.1/iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2. Connected doc...

CVE-2020-3834

CVE-2020-3834 is a memory corruption issue affecting the Apple Watch kernel. The flaw could allow an application to execute code with kernel privileges. It is fixed in watchOS 6.1.2; affected products are Apple Watch Series 1 and later, per Apple documentation and NVD records. The vulnerability i...

CVE-2020-3842

CVE-2020-3842 is a memory corruption vulnerability affecting Apple platforms (iOS, iPadOS, macOS, tvOS, watchOS) that can allow an application to execute arbitrary code with kernel privileges. The issue is fixed in iOS 13.3.1 / iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2...

CVE-2020-3826

CVE-2020-3826 is an out-of-bounds read in Apple’s ImageIO image processing. Processing a maliciously crafted image may lead to arbitrary code execution. Fixed in iOS 13.3.1 / iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, and corresponding Apple platform updates; iTunes/iCloud...

CVE-2020-3837

CVE-2020-3837 is an Apple memory-corruption issue fixed in iOS 13.3.1, iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, and watchOS 6.1.2, with potential to run arbitrary code with kernel privileges. Connected analysis documents reveal concrete Android exploitation research tied to this CVE fa...

CVE-2020-3843

CVE-2020-3843 is an AWDL kernel vulnerability in macOS/iOS where IO80211AWDLPeer::parseAwdlSyncTreeTLV incorrectly handles the SYNC_TREE TLV length. The TLV length is clamped to 1024, but the destination buffer for sync_tree_macs is only 60 bytes (10 MACs), enabling a linear heap overflow when a ...