CVE-2020-9914 - An input validation issue existed in Bluetooth

Back Back to CVE browser

HIGH

An input validation issue existed in Bluetooth

Published Oct 16, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.24%

Description

An input validation issue existed in Bluetooth. This issue was addressed with improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8. An attacker in a privileged network position may be able to perform denial of service attack using malformed Bluetooth packets.

Affected products

Vendor Apple Product iOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <iOS 13.6 and iPadOS 13.6
Vendor Apple Product tvOS Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <tvOS 13.4.8

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Apple

iOS

n/a

Version	Status	Constraints
unspecified	affected	<iOS 13.6 and iPadOS 13.6

Apple

tvOS

n/a

Version	Status	Constraints
unspecified	affected	<tvOS 13.4.8

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30693
Advisory
https://support.apple.com/HT211288
x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211290
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30693		Advisory
https://support.apple.com/HT211288		x_refsource_MISCRelease NotesVendor Advisory
https://support.apple.com/HT211290		x_refsource_MISCRelease NotesVendor Advisory