CVE-2020-9965

Published: Dec 8, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges.

Affected (5)

Products: Apple: Ipados, Iphone Os, Macos, Tvos, Watchos

5 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Apple Ipados	Before 14.0
Apple Iphone Os	Before 14.0
Apple Macos	Before 11.0.1
Apple Tvos	Before 14.0
Apple Watchos	Before 7.0

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (10)

http://seclists.org/fulldisclosure/2020/Dec/32

Source: product-security@apple.com

Mailing ListThird Party Advisory

https://support.apple.com/en-us/HT211843

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT211844

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT211850

Source: product-security@apple.com

Release NotesVendor Advisory

https://support.apple.com/en-us/HT211931

Source: product-security@apple.com

Release NotesVendor Advisory

http://seclists.org/fulldisclosure/2020/Dec/32