Unrated severityNVD Advisory· Published Oct 22, 2020· Updated Aug 4, 2024

CVE-2020-9880

Description

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution.

Affected products

Apple Inc./tvOSv5
Range: unspecified
Apple Inc./macOSv5
Range: unspecified
Apple Inc./watchOSv5
Range: unspecified
Apple Inc./iOScpe-rescue
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.apple.com/kb/HT211288mitrex_refsource_MISC
support.apple.com/kb/HT211289mitrex_refsource_MISC
support.apple.com/kb/HT211290mitrex_refsource_MISC
support.apple.com/kb/HT211291mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000