CVE-2020-27911

Published: Dec 8, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An integer overflow was addressed through improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. A remote attacker may be able to cause unexpected application termination or arbitrary code execution.

Affected (7)

Products: Apple: Icloud, Ipados, Iphone Os, Itunes, Macos, Tvos, Watchos

7 products

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Apple Icloud	Before 11.5
Apple Ipados	Before 14.2
Apple Iphone Os	Before 14.2
Apple Itunes	Before 12.11
Apple Macos	From 11.0 to 11.0.1
Apple Tvos	Before 14.2
Apple Watchos	Before 7.1

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (18)

http://seclists.org/fulldisclosure/2020/Dec/26

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Dec/32

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://support.apple.com/en-us/HT211928

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT211929

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT211930

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT211931

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT211933

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/en-us/HT211935

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT212011

Source: product-security@apple.com

Vendor Advisory

http://seclists.org/fulldisclosure/2020/Dec/26

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Dec/32

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://support.apple.com/en-us/HT211928

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT211929

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT211930

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT211931

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT211933

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/en-us/HT211935

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT212011

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.