CVE-2020-9876

Published: Oct 22, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.

Affected (34)

Products: Apple: Icloud, Ipados, Iphone Os, Itunes, Mac Os X, Macos, Tvos, Watchos

8 products

Configuration A

34 vulnerable

Vulnerable Software	Affected Versions
Apple Icloud	Before 7.20
Apple Icloud	From 10.0 to 11.5
Apple Ipados	Before 14.0
Apple Iphone Os	Before 14.0
Apple Itunes	Before 12.10.9
Apple Mac Os X	From 10.13 to 10.13.6
Apple Mac Os X	From 10.14 to 10.14.6
Apple Mac Os X	From 10.15 to 10.15.6
Apple Mac Os X	Version 10.13.6
Apple Mac Os X	Version 10.13.6 security_update_2018-002
Apple Mac Os X	Version 10.13.6 security_update_2018-003
Apple Mac Os X	Version 10.13.6 security_update_2019-001
Apple Mac Os X	Version 10.13.6 security_update_2019-002
Apple Mac Os X	Version 10.13.6 security_update_2019-003
Apple Mac Os X	Version 10.13.6 security_update_2019-004
Apple Mac Os X	Version 10.13.6 security_update_2019-005
Apple Mac Os X	Version 10.13.6 security_update_2019-006
Apple Mac Os X	Version 10.13.6 security_update_2019-007
Apple Mac Os X	Version 10.13.6 security_update_2020-001
Apple Mac Os X	Version 10.13.6 security_update_2020-002
Apple Mac Os X	Version 10.13.6 security_update_2020-003
Apple Mac Os X	Version 10.14.6
Apple Mac Os X	Version 10.14.6 security_update_2019-001
Apple Mac Os X	Version 10.14.6 security_update_2019-002
Apple Mac Os X	Version 10.14.6 security_update_2019-004
Apple Mac Os X	Version 10.14.6 security_update_2019-005
Apple Mac Os X	Version 10.14.6 security_update_2019-006
Apple Mac Os X	Version 10.14.6 security_update_2019-007
Apple Mac Os X	Version 10.14.6 security_update_2020-001
Apple Mac Os X	Version 10.14.6 security_update_2020-002
Apple Mac Os X	Version 10.14.6 security_update_2020-003
Apple Macos	From 11.0 to 11.0.1
Apple Tvos	Before 14.0
Apple Watchos	Before 7.0

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (34)

http://seclists.org/fulldisclosure/2020/Dec/32

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Nov/19

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Nov/20

Source: product-security@apple.com

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Nov/22

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://support.apple.com/kb/HT211288

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211289

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211290

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211291

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211293

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211294

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211295

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211843

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211844

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211850

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211931

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211935

Source: product-security@apple.com

Vendor Advisory

https://support.apple.com/kb/HT211952

Source: product-security@apple.com

Vendor Advisory

http://seclists.org/fulldisclosure/2020/Dec/32

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Nov/19

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Nov/20

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2020/Nov/22

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://support.apple.com/kb/HT211288

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211289

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211290

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211291

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211293

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211294

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211295

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211843

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211844

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211850

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211931

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211935

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://support.apple.com/kb/HT211952

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.