← Back

Iphone Os

iphone_os

Vendor: Apple • 4,015 CVEs

CVEs (4,015)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-6616
2Apple
Google
4Android
IpadosIphone Os+1 more
Nov 21, 2024
May 8, 2020
N/A· v4
6.5 MEDIUM· v3
3.3 LOW· v2
Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to...Show more
Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situations where a Hardware Random Number Generator (HRNG) should have been used to prevent spoofing. This affects, for example, Samsung Galaxy S8, S8+, and Note8 devices with the BCM4361 chipset. The Samsung ID is SVE-2020-16882 (May 2020).Show less
CVE-2019-6203
1Apple
3Iphone Os
Mac Os XTvos
Nov 21, 2024
Apr 17, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
A logic issue was addressed with improved state management. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2. An attacker in a privileged network position may be able to intercept network traffic.
CVE-2020-11765
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.
CVE-2020-11764
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
CVE-2020-11763
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.
CVE-2020-11762
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.
CVE-2020-11761
5Apple
CanonicalDebian+2 more
11Debian Linux
FedoraIcloud+8 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.
CVE-2020-11760
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.
CVE-2020-11759
5Apple
CanonicalDebian+2 more
11Debian Linux
FedoraIcloud+8 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer.
CVE-2020-11758
6Apple
CanonicalDebian+3 more
12Debian Linux
FedoraIcloud+9 more
Nov 21, 2024
Apr 14, 2020
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.
CVE-2020-9785
1Apple
5Ipados
Iphone OsMac Os X+2 more
Nov 21, 2024
Apr 1, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to exe...Show more
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.Show less
CVE-2020-9783
1Apple
6Icloud
IpadosIphone Os+3 more
Nov 21, 2024
Apr 1, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.1...Show more
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Processing maliciously crafted web content may lead to code execution.Show less
CVE-2020-9781
1Apple
2Ipados
Iphone Os
Nov 21, 2024
Apr 1, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user may grant website permissions to a site they didn't intend to.
CVE-2020-9780
1Apple
2Ipados
Iphone Os
Nov 21, 2024
Apr 1, 2020
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted content in the app switcher.
CVE-2020-9777
1Apple
2Ipados
Iphone Os
Nov 21, 2024
Apr 1, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video. This issue is fixed in iOS 13.4 and iPadOS 13.4. Cropped videos may not be shared properly via Mail...Show more
An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video. This issue is fixed in iOS 13.4 and iPadOS 13.4. Cropped videos may not be shared properly via Mail.Show less
CVE-2020-9775
1Apple
3Ipados
Iphone OsMac Os X
Nov 21, 2024
Apr 1, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may...Show more
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user's private browsing activity may be unexpectedly saved in Screen Time.Show less
CVE-2020-9773
1Apple
2Ipados
Iphone Os
Nov 21, 2024
Apr 1, 2020
N/A· v4
3.3 LOW· v3
4.3 MEDIUM· v2
The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malicious application may be able to identify what other applications a user has installed.
CVE-2020-9770
1Apple
2Ipados
Iphone Os
Nov 21, 2024
Apr 1, 2020
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to intercept Bluetooth traffic.
CVE-2020-9768
1Apple
4Ipados
Iphone OsTvos+1 more
Nov 21, 2024
Apr 1, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able to execute arbitrary code with system privileges.
CVE-2020-3919
1Apple
5Ipados
Iphone OsMac Os X+2 more
Nov 21, 2024
Apr 1, 2020
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute a...Show more
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. A malicious application may be able to execute arbitrary code with kernel privileges.Show less