Unrated severityNVD Advisory· Published Oct 16, 2020· Updated Aug 4, 2024

CVE-2020-9889

Description

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. Processing a maliciously crafted audio file may lead to arbitrary code execution.

Affected products

Apple Inc./tvOSv5
Range: unspecified
Apple Inc./macOSv5
Range: unspecified
Apple Inc./watchOSv5
Range: unspecified
Apple Inc./iOScpe-rescue
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.apple.com/HT211288mitrex_refsource_MISC
support.apple.com/HT211289mitrex_refsource_MISC
support.apple.com/HT211290mitrex_refsource_MISC
support.apple.com/HT211291mitrex_refsource_MISC
www.zerodayinitiative.com/advisories/ZDI-20-1391/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000