HIGH
A use after free issue was addressed with improved memory management
Published Apr 2, 2021
7.8
HIGHCVSS 3.1
EPSS 1.01%
Description
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8, iCloud for Windows 7.20, macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.
Affected products
-
- Version unspecifiedStatusaffectedConstraints<13.6
- Version
-
- Version unspecifiedStatusaffectedConstraints<10.15
- Version unspecifiedStatusaffectedConstraints<13.4
- Version unspecifiedStatusaffectedConstraints<6.2
- Version unspecifiedStatusaffectedConstraints<7.20
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Apple | iOS and iPadOS | n/a |
| |||||||||||||||
| Apple | macOS | n/a |
|
OR
- < 7.20
- < 13.6
- < 13.6
- < 10.13.6
- ≥ 10.14 · < 10.14.6
- ≥ 10.15 · < 10.15.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.13.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- 10.14.6
- < 13.4.8
- < 6.2.8
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30705 Advisory
- https://support.apple.com/en-us/HT211288 x_refsource_MISCVendor Advisory
- https://support.apple.com/en-us/HT211289 x_refsource_MISCVendor Advisory
- https://support.apple.com/en-us/HT211290 x_refsource_MISCVendor Advisory
- https://support.apple.com/en-us/HT211291 x_refsource_MISCVendor Advisory
- https://support.apple.com/en-us/HT211295 x_refsource_MISCVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30705 | Advisory | |
| https://support.apple.com/en-us/HT211288 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/en-us/HT211289 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/en-us/HT211290 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/en-us/HT211291 | x_refsource_MISCVendor Advisory | |
| https://support.apple.com/en-us/HT211295 | x_refsource_MISCVendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner apple
Published Apr 2, 2021
Updated Aug 4, 2024
Reserved Mar 2, 2020
Link CVE-2020-9926
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2020-30705 Assigner apple
Published Apr 2, 2021
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-30705