HIGH
A memory corruption issue was addressed by removing the vulnerable code
Published Oct 16, 2020
8.6
HIGHCVSS 3.1
EPSS 0.91%
Description
A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to break out of its sandbox.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<iOS 13.6 and iPadOS 13.6
- Version
-
- Version unspecifiedStatusaffectedConstraints<macOS Catalina 10.15.6
- Version
-
- Version unspecifiedStatusaffectedConstraints<tvOS 13.4.8
- Version
-
- Version unspecifiedStatusaffectedConstraints<watchOS 6.2.8
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Apple | iOS | n/a |
| ||||||
| Apple | macOS | n/a |
| ||||||
| Apple | tvOS | n/a |
| ||||||
| Apple | watchOS | n/a |
|
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (4)
- https://support.apple.com/HT211288 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211289 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211290 x_refsource_MISCVendor Advisory
- https://support.apple.com/HT211291 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://support.apple.com/HT211288 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211289 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211290 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/HT211291 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Oct 16, 2020
Updated Aug 4, 2024
Reserved Mar 2, 2020
Link CVE-2020-9865
CISA Vulnrichment
Updated n/a