CVE-2020-9790 - An out-of-bounds write issue was addressed with improved bounds checking

Back Back to CVE browser

HIGH

An out-of-bounds write issue was addressed with improved bounds checking

Published Jun 9, 2020

8.8

HIGH

CVSS 3.1

EPSS 2.48%

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.

Affected products

Vendor Apple Product iCloud for Windows Default
unknown
Affected
- ≥ unspecified, < iCloud for Windows 11.2
Vendor Apple Product iCloud for Windows (Legacy) Default
unknown
Affected
- ≥ unspecified, < iCloud for Windows 7.19
Vendor Apple Product iOS Default
unknown
Affected
- ≥ unspecified, < iOS 13.5 and iPadOS 13.5
Vendor Apple Product iTunes for Windows Default
unknown
Affected
- ≥ unspecified, < iTunes 12.10.7 for Windows
Vendor Apple Product macOS Default
unknown
Affected
- ≥ unspecified, < macOS Catalina 10.15.5
Vendor Apple Product tvOS Default
unknown
Affected
- ≥ unspecified, < tvOS 13.4.5
Vendor Apple Product watchOS Default
unknown
Affected
- ≥ unspecified, < watchOS 6.2.5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Apple	iCloud for Windows	unknown	Affected ≥ unspecified, < iCloud for Windows 11.2
Apple	iCloud for Windows (Legacy)	unknown	Affected ≥ unspecified, < iCloud for Windows 7.19
Apple	iOS	unknown	Affected ≥ unspecified, < iOS 13.5 and iPadOS 13.5
Apple	iTunes for Windows	unknown	Affected ≥ unspecified, < iTunes 12.10.7 for Windows
Apple	macOS	unknown	Affected ≥ unspecified, < macOS Catalina 10.15.5
Apple	tvOS	unknown	Affected ≥ unspecified, < tvOS 13.4.5
Apple	watchOS	unknown	Affected ≥ unspecified, < watchOS 6.2.5

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (8)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30569
Advisory
https://support.apple.com/HT211168
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211170
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211171
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211175
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211178
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211179
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211181
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30569		Advisory
https://support.apple.com/HT211168		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211170		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211171		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211175		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211178		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211179		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211181		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner apple

Published Jun 9, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9790

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9790

Red Hat

No data

ENISA EUVD

Assigner apple

Published Jun 9, 2020

Updated Aug 4, 2024

Link EUVD-2020-30569

GitHub

No data